From c0132e7ef7329c5e0fc0ee564a37ab2fb826b915 Mon Sep 17 00:00:00 2001 From: Ralf Becker Date: Tue, 4 Jan 2011 19:56:14 +0000 Subject: [PATCH] * Calendar: invite rights, should NOT implicate a freebusy rights (users with invite rights could see freebusy times of other users) --- calendar/inc/class.calendar_bo.inc.php | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/calendar/inc/class.calendar_bo.inc.php b/calendar/inc/class.calendar_bo.inc.php index fe645e0550..ecea774d78 100644 --- a/calendar/inc/class.calendar_bo.inc.php +++ b/calendar/inc/class.calendar_bo.inc.php @@ -1067,8 +1067,8 @@ class calendar_bo } $grants = $this->grants[$owner]; - // now any ACL rights implicate FREEBUSY rights (at least READ has to include FREEBUSY) - if ($grants) $grants |= EGW_ACL_FREEBUSY; + // now any ACL rights (but invite rights!) implicate FREEBUSY rights (at least READ has to include FREEBUSY) + if ($grants & ~EGW_ACL_INVITE) $grants |= EGW_ACL_FREEBUSY; if (is_array($event) && ($needed == EGW_ACL_READ || $needed == EGW_ACL_FREEBUSY)) {