View Issue Details

Jump to NotesJump to History
IDProjectCategoryView StatusDate SubmittedLast Update
0000303SOGoBackend Calendarpublic2009-12-29 13:142010-01-07 16:10
Reporterpucexcit Assigned Toludovic  
PrioritynormalSeveritymajorReproducibilityalways
Status resolvedResolutionwon't fix 
Product Versionnightly v2 
Summary0000303: Iphone / Shared calendars security issue
Description

if you share your calendars with others with View Date/hours only.
Someone using an iphone connected with your calendars will be able to see all your events (descriptions + Date/hours )

FYI : All my calendars have "By default" view only dates/hours.

.GNUstepdefaults :

SOGoCalendarDefaultRoles = (
PublicDAndTViewer,
ConfidentialDAndTViewer
);

TagsNo tags attached.

Activities

wsourdeau

wsourdeau

2010-01-06 21:03

viewer   ~0000407

Is your login name mentionned in the "SOGoSuperUsernames" configuration var?
pucexcit

pucexcit

2010-01-07 10:57

reporter   ~0000411

Yes, my username was in SOGoSuperUsernames array.
I ve tried to remove it , and i after it works

Thanks for your help

Issue History

Date Modified Username Field Change
2009-12-29 13:14 pucexcit New Issue
2010-01-06 21:03 wsourdeau Note Added: 0000407
2010-01-07 10:57 pucexcit Note Added: 0000411
2010-01-07 12:28 ludovic Status new => resolved
2010-01-07 12:28 ludovic Fixed in Version => 1.2.0
2010-01-07 12:28 ludovic Resolution open => won't fix
2010-01-07 12:28 ludovic Assigned To => ludovic
2010-01-07 16:10 francis Fixed in Version 1.2.0 =>