From 5ad371a910af39c133176f7e316187a3bdf132d5 Mon Sep 17 00:00:00 2001
From: Andrew McMillan <andrew@morphoss.com>
Date: Mon, 27 Dec 2010 17:13:43 +1300
Subject: [PATCH] Don't allow feed access unless user has at least freebusy
 privileges.

Signed-off-by: Andrew McMillan <andrew@morphoss.com>
---
 htdocs/feed.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/htdocs/feed.php b/htdocs/feed.php
index 780900d0..0daf32ac 100644
--- a/htdocs/feed.php
+++ b/htdocs/feed.php
@@ -32,7 +32,7 @@ function caldav_get_feed( $request ) {
   require_once("DAVResource.php");
 
   $collection = new DAVResource($request->path);
-  $collection->NeedPrivilege( array('urn:ietf:params:xml:ns:caldav:read-free-busy','DAV::read') );
+  $collection->NeedPrivilege( array('DAV::read') );
 
   if ( ! $collection->Exists() ) {
     $request->DoResponse( 404, translate("Resource Not Found.") );