improved privacy on conflicting events - only check ACLs for invited participants and not all participant ACLs from conflicting event

This commit is contained in:
Christian Binder 2009-10-29 09:25:54 +00:00
parent 28a778955c
commit b2a3bf96a0

View File

@ -224,12 +224,13 @@ class calendar_boupdate extends calendar_bo
{
foreach($conflicts as $key => $conflict)
{
$conflict['participants'] = array_intersect_key($conflict['participants'],$event['participants']);
if (!$this->check_perms(EGW_ACL_READ,$conflict))
{
$conflicts[$key] = array(
'id' => $conflict['id'],
'title' => lang('busy'),
'participants' => array_intersect_key($conflict['participants'],$event['participants']),
'participants' => $conflict['participants'],
'start' => $conflict['start'],
'end' => $conflict['end'],
);