nik/davical
1
0
Fork 0
mirror of https://gitlab.com/davical-project/davical.git synced 2026-05-25 02:34:17 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

Move MKCOL/MKCALENDAR to NeedPrivilege()

Browse Source
This commit is contained in:
Andrew McMillan 2009-12-27 14:17:25 +13:00
parent 1457f6066b
commit ddb45c8158
1 changed files with 2 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
inc/caldav-MKCOL.php
View File

@ -10,9 +10,7 @@
*/ */
dbg_error_log('MKCOL', 'method handler'); dbg_error_log('MKCOL', 'method handler');
if ( ! $request->AllowedTo('bind') ) { $request->NeedPrivilege('DAV::bind');
$request->DoResponse( 403, translate('You may not create a calendar there.') );
}
$displayname = $request->path; $displayname = $request->path;
@ -51,7 +49,7 @@ if ( isset($request->xml_tags) ) {
if ( $xmltree->GetTag() == 'DAV::mkcol' ) $request_type = 'extended-mkcol'; if ( $xmltree->GetTag() == 'DAV::mkcol' ) $request_type = 'extended-mkcol';
if ( $xmltree->GetTag() != 'urn:ietf:params:xml:ns:caldav:mkcalendar' && $request_type != 'extended-mkcol' ) { if ( $xmltree->GetTag() != 'urn:ietf:params:xml:ns:caldav:mkcalendar' && $request_type != 'extended-mkcol' ) {
$request->DoResponse( 403, sprintf('The XML is not a "DAV::mkcol" or "urn:ietf:params:xml:ns:caldav:mkcalendar" document (%s)', $xmltree->GetTag()) ); $request->DoResponse( 406, sprintf('The XML is not a "DAV::mkcol" or "urn:ietf:params:xml:ns:caldav:mkcalendar" document (%s)', $xmltree->GetTag()) );
} }
$setprops = $xmltree->GetContent(); // <set> $setprops = $xmltree->GetContent(); // <set>
$setprops = $setprops[0]->GetContent(); // <prop> $setprops = $setprops[0]->GetContent(); // <prop>