nik/davical
1
0
Fork 0
mirror of https://gitlab.com/davical-project/davical.git synced 2026-08-29 18:26:05 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

Don't allow feed access unless user has at least freebusy privileges.

Browse Source 
Signed-off-by: Andrew McMillan <andrew@morphoss.com>
This commit is contained in:
Andrew McMillan 2010-12-27 17:13:43 +13:00
parent 520077a9a5
commit 5ad371a910
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
htdocs/feed.php
View File

@ -32,7 +32,7 @@ function caldav_get_feed( $request ) {
require_once("DAVResource.php");
$collection = new DAVResource($request->path);
$collection->NeedPrivilege( array('urn:ietf:params:xml:ns:caldav:read-free-busy','DAV::read') );
$collection->NeedPrivilege( array('DAV::read') );
if ( ! $collection->Exists() ) {
$request->DoResponse( 404, translate("Resource Not Found.") );