mirror of
https://gitlab.com/davical-project/davical.git
synced 2026-05-24 02:24:39 +00:00
Allow TODO to be restricted to calendar owner/admin.
This commit is contained in:
parent
b277b87f8a
commit
ecf87b2552
@ -39,7 +39,12 @@ $c->system_name = "Really Simple CalDAV Store";
|
||||
*/
|
||||
$c->hide_alarm = true;
|
||||
|
||||
|
||||
/**
|
||||
*default is false
|
||||
*If true, then TODO requested from someone other than the admmin or owner
|
||||
* of a calendar will not get any answer
|
||||
*/
|
||||
$c->hide_TODO = true;
|
||||
|
||||
/***************************************************************************
|
||||
* *
|
||||
|
||||
@ -389,6 +389,9 @@ for ( $i=0; $i <= $reportnum; $i++ ) {
|
||||
}
|
||||
|
||||
$where .= "AND (calendar_item.class != 'PRIVATE' OR calendar_item.class IS NULL OR get_permissions($session->user_no,caldav_data.user_no) ~ 'A') "; // Must have 'all' permissions to see confidential items
|
||||
if($c->hide_TODO){
|
||||
$where .= "AND (caldav_data.caldav_type NOT IN ('VTODO') OR get_permissions($session->user_no,caldav_data.user_no) ~ 'A') ";
|
||||
}
|
||||
$qry = new PgQuery( "SELECT * , get_permissions($session->user_no,caldav_data.user_no) as permissions FROM caldav_data INNER JOIN calendar_item USING(user_no, dav_name)". $where );
|
||||
if ( $qry->Exec("REPORT",__LINE__,__FILE__) && $qry->rows > 0 ) {
|
||||
while( $calendar_object = $qry->Fetch() ) {
|
||||
|
||||
Loading…
x
Reference in New Issue
Block a user