nik/davical
1
0
Fork 0
mirror of https://gitlab.com/davical-project/davical.git synced 2026-08-31 18:46:02 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

PROPPATCH: reject protected properties group-membership, calendar-proxy-{read,write}-for

Browse Source
This commit is contained in:
Florian Schlichting 2017-05-01 20:54:03 +02:00
parent a6b286ab98
commit 8c5101c185
1 changed files with 6 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
inc/caldav-PROPPATCH.php
View File

@ -212,6 +212,9 @@ foreach( $setprops AS $k => $setting ) {
case 'DAV::creationdate':
case 'DAV::lockdiscovery':
case 'DAV::supportedlock':
case 'DAV::group-membership':
case 'http://calendarserver.org/ns/:calendar-proxy-read-for':
case 'http://calendarserver.org/ns/:calendar-proxy-write-for':
add_failure('set', $tag, 'HTTP/1.1 403 Forbidden', translate("Property is read-only"), 'cannot-modify-protected-property');
break;
@ -264,6 +267,9 @@ foreach( $rmprops AS $k => $setting ) {
case 'DAV::displayname':
case 'DAV::lockdiscovery':
case 'DAV::supportedlock':
case 'DAV::group-membership':
case 'http://calendarserver.org/ns/:calendar-proxy-read-for':
case 'http://calendarserver.org/ns/:calendar-proxy-write-for':
add_failure('rm', $tag, 'HTTP/1.1 409 Conflict', translate("Property is read-only"));
dbg_error_log( 'PROPPATCH', ' RMProperty %s is read only and cannot be removed', $tag);
break;