10 Commits

Author SHA1 Message Date
Andrew Ruthven
d3a7d10873 Merge branch 'master' into multiple-email-new 2021-02-26 00:18:53 +13:00
Florian Schlichting
202e2edd5a tighten $c->list_everyone to look for DAV::read privilege and actually block access to principals and collections
Groups really only exist in the davical web interface, CALDAV clients
discover principals and collections based on GRANTs such as the
DAV::read privilege, so use that for the web interface as well.

Also, not listing users is nice, actually blocking access to those users
(which can be enumerated with the id GET parameter) is a lot better.
2021-02-09 01:54:32 +08:00
Klaus M Pfeiffer
042ce5f076 add feature list_everyone (fixes #59) 2021-02-08 17:41:28 +00:00
Andrew Ruthven
6308949b87 WIP: Multiple emails for principles 2021-01-31 20:27:38 +13:00
Andrew McMillan
08e5f97c56 Remove unnecessary call to DoQuery()
Signed-off-by: Andrew McMillan <andrew@morphoss.com>
2010-12-28 02:06:02 +13:00
Andrew McMillan
3c90dc23ed Add support for listing inactive principals. 2010-02-24 16:26:12 +13:00
Andrew McMillan
87816b2a05 Use htmlspecialchars rather than htmlentities, which screws up translations. 2010-02-23 22:59:36 +13:00
Andrew McMillan
34ef2693a3 Make admin stuff work better in a subfolder. 2010-02-12 15:49:34 -08:00
Andrew McMillan
62e43e1be3 Rename davical.php to admin.php which is more appropriate. 2009-12-04 22:57:03 +13:00
Andrew McMillan
516dc03880 New screens for browsing/editing Principals & Collections. 2009-11-22 22:33:56 +13:00