Andrew Ruthven 734d5c1f99 The public access endpoint is public.php

2025-01-22 14:48:24 +13:00

..

collection-edit.php

The public access endpoint is public.php

2025-01-22 14:48:24 +13:00

external-browse.php

Listing External Calendars is part of the Administration menu and should be restricted to admins

2021-02-09 01:54:32 +08:00

principal-browse.php

tighten $c->list_everyone to look for DAV::read privilege and actually block access to principals and collections

2021-02-09 01:54:32 +08:00

principal-edit.php

Test that deletion of a principal's items are secure

2024-03-10 00:37:11 +13:00