From b9c06286152492e2b1dd94515ebb09e73e60408b Mon Sep 17 00:00:00 2001
From: Andrew McMillan <debian@mcmillan.net.nz>
Date: Sun, 8 Oct 2006 00:26:27 +1300
Subject: [PATCH] Grab a collection as one VCALENDAR

---
 htdocs/ics.php | 92 ++++++++++++++++++++++++++++++++++++++++++++++++++
 1 file changed, 92 insertions(+)
 create mode 100644 htdocs/ics.php

diff --git a/htdocs/ics.php b/htdocs/ics.php
new file mode 100644
index 00000000..bb83bee6
--- /dev/null
+++ b/htdocs/ics.php
@@ -0,0 +1,92 @@
+<?php
+require_once("always.php");
+dbg_error_log( "ics", " User agent: %s", $_SERVER['HTTP_USER_AGENT'] );
+require_once("BasicAuthSession.php");
+require_once("iCalendar.php");
+
+
+$raw_headers = apache_request_headers();
+$raw_post = file_get_contents ( 'php://input');
+
+if ( isset($debugging) && isset($_GET['method']) ) {
+  $_SERVER['REQUEST_METHOD'] = $_GET['method'];
+}
+
+/**
+* A variety of requests may set the "Depth" header to control recursion
+*/
+$query_depth = (isset($_SERVER['HTTP_DEPTH']) ? $_SERVER['HTTP_DEPTH'] : 0);
+if ( $query_depth == 'infinite' ) $query_depth = 99;
+$query_depth = intval($query_depth);
+
+/**
+* Our path is /<script name>/<user name>/<user controlled> if it ends in
+* a trailing '/' then it is referring to a DAV 'collection' but otherwise
+* it is referring to a DAV data item.
+*
+* Permissions are controlled as follows:
+*  1. if there is no <user name> component, the request has read privileges
+*  2. if the requester is an admin, the request has read/write priviliges
+*  3. if there is a <user name> component which matches the logged on user
+*     then the request has read/write privileges
+*  4. otherwise we query the defined relationships between users and use
+*     the maximum privileges returned from that analysis.
+*/
+$path_split = preg_split('#/+#', $_SERVER['PATH_INFO'] );
+dbg_log_array("ics", "PATH", $path_split, true );
+$permissions = array();
+unset($path_user_no);
+unset($path_username);
+if ( $session->AllowedTo("Admin") ) {
+  $permissions = array('read' => 1 );
+}
+if ( isset($path_split[1]) && $path_split[1] != '' ) {
+  $path_username = $path_split[1];
+  dbg_error_log( "ics", "It appears that we have a reasonable path for this.", $path_username );
+  $qry = new PgQuery( "SELECT * FROM usr WHERE username = ?;", $path_username );
+  if ( $qry->Exec("caldav") && $path_user_record = $qry->Fetch() ) {
+    $path_user_no = $path_user_record->user_no;
+  }
+  if ( $session->AllowedTo("Admin") || $session->user_no == $path_user_no ) {
+    $permissions = array('read' => 1 );
+  }
+  else {
+    /**
+    * We need to query the database for permissions
+    */
+  }
+}
+
+header("Content-type: text/plain");
+
+if ( !isset($path_username) && ! $session->AllowedTo("Admin") ) {
+  header('HTTP/1.0 401 Unauthorized');
+  printf( "You may not request a summarised set of all calendar information." );
+  dbg_error_log( "ics", "User '%s' attempted a request for %s which would be all calendar information.", $session->username, $_SERVER['PATH_INFO'] );
+}
+elseif ( isset($permissions['read']) ) {
+  $results = iCalendar::iCalHeader();
+
+  $qry = new PgQuery( "SELECT * FROM caldav_data INNER JOIN calendar_item USING(user_no, dav_name)" );
+  if ( $qry->Exec("ics") && $qry->rows > 0 ) {
+    while( $resource = $qry->Fetch() ) {
+      $item = new iCalendar( array('icalendar' => $resource->caldav_data) );
+      $results .= $item->JustThisBitPlease('VEVENT', 99999);
+      $results .= $item->JustThisBitPlease('VTODO', 99999);
+      $results .= $item->JustThisBitPlease('VJOURNAL', 99999);
+    }
+  }
+
+  $results .= iCalendar::iCalFooter();
+
+  print $results;
+}
+else {
+  header('HTTP/1.0 401 Unauthorized');
+  header("Content-type: text/plain");
+  printf( "User '%s' does not have rights to that calendar information.", $session->username );
+  dbg_error_log( "ics", "User '%s' does not have rights to that calendar information.", $session->username );
+  exit;
+}
+
+?>
\ No newline at end of file