Florian Schlichting
4cf6628ea5
cannot-modify-protected-property should be used with 403 Forbidden, not 409 Conflict
...
see the end of https://tools.ietf.org/html/rfc4918#section-16 (WebDAV,
Precondition/Postcondition XML Elements)
2017-03-29 11:22:44 +02:00
Florian Schlichting
fb4f80d4c1
do not put two sets of angle brackets around cannot-modify-protected-property error tag ( fixes #112 )
2017-03-29 11:20:35 +02:00
Florian Schlichting
f1ca12bbe9
Fix display of deactivated users after LDAP sync to not include those in $c->do_not_sync_from_ldap
...
...thus reducing the rate of heart attacks in DAViCal admins.
Also: ignore empty user objects that my LDAP server seems to generate.
2017-03-27 16:56:34 +02:00
Florian Schlichting
2a84694331
Unbreak locale selection in admin interface
...
http://php.net/manual/en/function.setlocale.php says "Different systems
have different naming schemes for locales." This seems to be true for
platforms (eg Win vs. Linux), but on Debian AFAIR locales were always at
least two-part (de_DE), never just one (de). This seems to have been
broken in 504651a3, likely by mistake.
Also, switch locale immediately, even before writing to the database.
BTW, what happens when system default locale is configured to e.g. fr_FR
and the user selects "English" - does that work?
2017-01-17 23:40:26 +01:00
Florian Schlichting
6edd828803
Fix ldapDriver instantiation
2017-01-17 23:36:05 +01:00
Marc
364bbd1df5
allow admins to manually toggle the uniqueMember fix via config ( fix #102 )
2017-01-17 23:30:59 +01:00
Florian Schlichting
1335a6117b
UI: create internal and external bindings ( closes : #90 )
2017-01-11 00:13:52 +01:00
Florian Schlichting
93bd6073b1
creating a DAVResource from "/ " loops a lot
2017-01-11 00:10:33 +01:00
Florian Schlichting
0ca04aaa68
UI: do not show tickets unless user has write access; they are like passwords
...
Same with external URLs
Also restrict Delete buttons on incoming binds to Admins: these binds
will usually live in other people's namespace, which we should not
alter, and may be restricted to default privileges (e.g. freebusy)
anyway
2017-01-11 00:10:21 +01:00
Florian Schlichting
ab7dad057d
UI: use ExtraRowFormat to fix tooltip on action rows / buttons
2017-01-10 22:14:42 +01:00
Florian Schlichting
2c11535eb0
use secure URIs where possible
2017-01-08 15:48:52 +01:00
Florian Schlichting
fd36a1f5a5
destroy LSID cookie when actively hitting "Logout" ( fixes #56 , Debian #703138 )
2017-01-08 02:12:22 +01:00
Florian Schlichting
93d3b6daba
remove logout button when the webserver does auth, or use a configured logout URL ( fixes #67 , Debian #703130 )
2017-01-08 02:08:13 +01:00
Florian Schlichting
202542dc1b
updates for bulk addressbook import
2017-01-07 02:17:29 +01:00
Florian Schlichting
e245b8d1fb
support for bulk addressbook import (thanks Jorge Lpez Prez) - fixes #74
2017-01-06 16:06:11 +01:00
Florian Schlichting
4d689f8539
Create configured default relationships from all drivers as well as for internal auth ( closes : #75 )
...
previously, this was only usable with the LDAP driver
2017-01-06 16:06:11 +01:00
Florian Schlichting
2c0c65d08a
add optional support for X-Forwarded-Proto etc ( closes : #87 )
...
Modify the relevant $_SERVER variables directly, as we're using them in
various places in davical and awl.
2017-01-06 16:06:11 +01:00
Florian Schlichting
ad763744f1
fix a typo, add a debug statement
...
WriteAddressbookMember doesn't exist, but as far as I can see it is only
referenced from WriteMember, which itself isn't used anywhere...
2017-01-06 15:04:59 +01:00
Florian Schlichting
78669a3078
delete obsolete entries when updating addressbooks as external resources (see comment on !34 )
2017-01-05 11:55:15 +01:00
Florian Schlichting
81e404264f
Merge branch 'addressbook_sync_token' into 'master'
...
Allow updating addressbooks as external resources. (Closes #93 )
Closes #93
See merge request !34
2017-01-05 10:31:11 +00:00
Florian Schlichting
c71bf2511e
fix expand-property "group-member-set" on calendar-proxy-write URL ( closes : #88 )
2017-01-04 22:32:58 +01:00
Florian Schlichting
e7c43a0689
fix infinite loop when finding delegates ( closes #48 )
2017-01-04 20:52:03 +01:00
Florian Schlichting
adce3f48a9
provide a .ics download link in collection view and document $c->get_includes_subcollections
2017-01-02 21:57:41 +01:00
Florian Schlichting
c305bef787
$principal->fullname is not a method ( fixes #101 )
2017-01-01 12:35:45 +01:00
Florian Schlichting
bd9d5eacf2
$session: document ->username, actually implement ->fullname
2016-12-31 15:15:33 +01:00
Florian Schlichting
fc78600e64
Allow deletion of collections, tickets, bindings of principals to whom you have write access ( closes : #47 )
...
Previously, only the Admin or the principal herself could delete a
collection. Deletion is immediate and irreversible, so there is a risk
in allowing this. But it doesn't make sense to allow the creation of a
test collection and then block the subsequent clean-up.
2016-12-30 21:43:29 +01:00
Florian Schlichting
c0a2d6a7ee
do not show edit buttons on admin pages when not allowed to edit
2016-12-30 18:47:46 +01:00
Florian Schlichting
fcace79813
display an error message when not allowed to delete something on the admin page
2016-12-30 16:25:53 +01:00
Florian Schlichting
f24c62531a
inc/ui/collection-edit.php: display only privileges applicable for collections
2016-12-30 08:54:28 +01:00
Florian Schlichting
404d9ab449
fix remaining apigen errors (duplicate function names etc)
2016-12-30 08:54:24 +01:00
Florian Schlichting
7cadfc9463
lets have only one function check_for_expansion()
2016-12-30 08:54:19 +01:00
Florian Schlichting
eaef540766
replace RRule with RRule-v2
2016-12-30 08:54:14 +01:00
Florian Schlichting
2a64f0be84
clean up apigen errors ( closes : #85 )
2016-12-30 08:54:10 +01:00
Florian Schlichting
701feb6143
drivers_*: brush up apidoc
2016-12-30 08:54:05 +01:00
Florian Schlichting
f4fd23ed3c
drivers_rimap: update similar to drivers_imap_pam
2016-12-30 08:53:59 +01:00
Florian Schlichting
1393c30390
migrate away from deprecated auth functions, warn more aggressively
2016-12-30 08:53:51 +01:00
Florian Schlichting
8639f08d45
RFC7240: "Prefer: return=minimal"
...
"return-minimal" was current up to and including draft -15
2016-12-30 08:53:31 +01:00
Florian Schlichting
8d06163ddf
less "global $foo"
2016-12-30 08:53:04 +01:00
Florian Schlichting
eb7f2edc0c
eliminate trailing whitespace, expand tabs
2016-12-30 08:52:44 +01:00
Florian Schlichting
063048802f
extra line (duplicate)
2016-12-30 08:52:12 +01:00
Émile Morel
af5cdfd46d
ldap group import: unset group after import
2016-12-08 15:08:38 +01:00
Andrew Ruthven
64be7d3127
Allow updating addressbooks as external resources. ( Closes #93 )
...
Previously if an addressbook was an external resource, then all local
info was deleted, and all the remote addressbook entries were
re-inserted, potentially creating new sync tokens.
This change only updates modified records.
2016-12-08 15:39:12 +13:00
Florian Schlichting
1548893229
fix ?add_member when PATH_INFO is not set ( closes #96 , thanks Thomas Zell!)
2016-12-04 01:07:23 +01:00
Florian Schlichting
9a4589123e
CreateDefaultRelationships is not defunct
2016-12-03 00:20:54 +01:00
Florian Schlichting
0901fd2756
Remove remaining references to $c->local_tzid ( fixes #35 )
2016-12-02 00:24:53 +01:00
Florian Schlichting
86447e31fe
Set the same default timezone to Database and PHP
2016-12-01 19:17:22 +01:00
Florian Schlichting
40ff70e11f
freebusy-functions.php: regular debug logging
2016-11-30 23:03:18 +01:00
Florian Schlichting
74e6f8bec9
global $c is not used in this function
...
delete it, as well as a lot of extra whitespace
2016-11-30 23:03:12 +01:00
Florian Schlichting
b7d1ad513e
DAVPrincipal: delete funny tabs and other unusual whitespace
2016-11-30 23:03:06 +01:00
Florian Schlichting
fd1fce90c3
DAVPrincipal: fix logging labels
2016-11-30 23:02:52 +01:00