Florian Schlichting 202e2edd5a tighten $c->list_everyone to look for DAV::read privilege and actually block access to principals and collections ...

Groups really only exist in the davical web interface, CALDAV clients
discover principals and collections based on GRANTs such as the
DAV::read privilege, so use that for the web interface as well.

Also, not listing users is nice, actually blocking access to those users
(which can be enumerated with the id GET parameter) is a lot better.

2021-02-09 01:54:32 +08:00

..

.gitignore

Ignore real configuration files.

2008-01-26 00:28:40 +13:00

apache-davical.conf

add PT to follow alias

2017-11-20 11:50:13 +00:00

debug-config.php

document AWL debug logging improvements

2016-12-31 17:34:10 +01:00

example-administration.yml

document that YAML hates tabs (fixes #70)

2015-12-14 10:59:20 +01:00

example-config.php

tighten $c->list_everyone to look for DAV::read privilege and actually block access to principals and collections

2021-02-09 01:54:32 +08:00

other-config.php

Document remaining config settings for which there are defaults, as well as the very useful skip_bad_event_on_import

2017-01-23 22:59:35 +01:00