extern/egroupware_official
1
0
Fork 0
mirror of https://github.com/EGroupware/egroupware.git synced 2025-02-23 05:41:02 +01:00
Code Issues Packages Projects Releases Wiki Activity

improved privacy on conflicting events - only check ACLs for invited participants and not all participant ACLs from conflicting event

Browse Source
This commit is contained in:
Christian Binder 2009-10-29 09:25:54 +00:00
parent 28a778955c
commit b2a3bf96a0
1 changed files with 2 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
calendar/inc/class.calendar_boupdate.inc.php
View File

@ -224,12 +224,13 @@ class calendar_boupdate extends calendar_bo
{ {
foreach($conflicts as $key => $conflict) foreach($conflicts as $key => $conflict)
{ {
$conflict['participants'] = array_intersect_key($conflict['participants'],$event['participants']);
if (!$this->check_perms(EGW_ACL_READ,$conflict)) if (!$this->check_perms(EGW_ACL_READ,$conflict))
{ {
$conflicts[$key] = array( $conflicts[$key] = array(
'id' => $conflict['id'], 'id' => $conflict['id'],
'title' => lang('busy'), 'title' => lang('busy'),
'participants' => array_intersect_key($conflict['participants'],$event['participants']), 'participants' => $conflict['participants'],
'start' => $conflict['start'], 'start' => $conflict['start'],
'end' => $conflict['end'], 'end' => $conflict['end'],
); );