mirror of
https://github.com/EGroupware/egroupware.git
synced 2024-11-22 07:53:39 +01:00
88720be9a2
sending now master, plus expanded recurrences (like we would do with exceptions) also no longer export DTSTART in RDATE as unnecessary
2020 lines
73 KiB
PHP
2020 lines
73 KiB
PHP
<?php
|
|
/**
|
|
* EGroupware: CalDAV/CardDAV/GroupDAV access: Calendar handler
|
|
*
|
|
* @link http://www.egroupware.org
|
|
* @license http://opensource.org/licenses/gpl-license.php GPL - GNU General Public License
|
|
* @package calendar
|
|
* @subpackage caldav
|
|
* @author Ralf Becker <RalfBecker-AT-outdoor-training.de>
|
|
* @copyright (c) 2007-16 by Ralf Becker <RalfBecker-AT-outdoor-training.de>
|
|
* @version $Id$
|
|
*/
|
|
|
|
use EGroupware\Api;
|
|
use EGroupware\Api\Acl;
|
|
|
|
/**
|
|
* CalDAV/CardDAV/GroupDAV access: Calendar handler
|
|
*
|
|
* Permanent error_log() calls should use $this->caldav->log($str) instead, to be send to PHP error_log()
|
|
* and our request-log (prefixed with "### " after request and response, like exceptions).
|
|
*
|
|
* @ToDo: new properties on calendars and it's resources specially from sharing:
|
|
* - for the invite property: 5.2.2 in https://trac.calendarserver.org/browser/CalendarServer/trunk/doc/Extensions/caldav-sharing.txt
|
|
* - https://trac.calendarserver.org/browser/CalendarServer/trunk/doc/Extensions/caldav-schedulingchanges.txt
|
|
*/
|
|
class calendar_groupdav extends Api\CalDAV\Handler
|
|
{
|
|
/**
|
|
* bo class of the application
|
|
*
|
|
* @var calendar_boupdate
|
|
*/
|
|
var $bo;
|
|
|
|
/**
|
|
* vCalendar Instance for parsing
|
|
*
|
|
* @var Horde_Icalendar
|
|
*/
|
|
var $vCalendar;
|
|
|
|
var $filter_prop2cal = array(
|
|
'SUMMARY' => 'cal_title',
|
|
'UID' => 'cal_uid',
|
|
'DTSTART' => 'cal_start',
|
|
'DTEND' => 'cal_end',
|
|
// 'DURATION'
|
|
//'RRULE' => 'recur_type',
|
|
//'RDATE' => 'cal_start',
|
|
//'EXRULE'
|
|
//'EXDATE'
|
|
//'RECURRENCE-ID'
|
|
);
|
|
|
|
/**
|
|
* Does client understand exceptions to be included in VCALENDAR component of series master sharing its UID
|
|
*
|
|
* That also means no EXDATE for these exceptions!
|
|
*
|
|
* Setting it to false, should give the old behavior used in 1.6 (hopefully) no client needs that.
|
|
*
|
|
* @var boolean
|
|
*/
|
|
var $client_shared_uid_exceptions = true;
|
|
|
|
/**
|
|
* Enable or disable Schedule-Tag handling:
|
|
* - return Schedule-Tag header in PUT response
|
|
* - update only status and alarms of calendar owner, if If-Schedule-Tag-Match header in PUT
|
|
*
|
|
* Disabling Schedule-Tag for iCal, as current implementation seems to create too much trouble :-(
|
|
* - iCal on OS X always uses If-Schedule-Tag-Match, even if other stuff in event is changed (eg. title)
|
|
* - iCal on iOS allways uses both If-Schedule-Tag-Match and If-Match (ETag)
|
|
* - Lighting 1.0 is NOT using it
|
|
*
|
|
* @var boolean
|
|
*/
|
|
var $use_schedule_tag = true;
|
|
|
|
/**
|
|
* Are we using id, uid or caldav_name for the path/url
|
|
*
|
|
* Get's set in constructor to 'caldav_name' and self::$path_extension = ''!
|
|
*/
|
|
static $path_attr = 'id';
|
|
|
|
/**
|
|
* Contains IDs for multiget REPORT to be able to report missing ones
|
|
*
|
|
* @var string[]
|
|
*/
|
|
var $requested_multiget_ids;
|
|
|
|
/**
|
|
* Constructor
|
|
*
|
|
* @param string $app 'calendar', 'addressbook' or 'infolog'
|
|
* @param Api\CalDAV $caldav calling class
|
|
*/
|
|
function __construct($app, Api\CalDAV $caldav)
|
|
{
|
|
parent::__construct($app, $caldav);
|
|
|
|
$this->bo = new calendar_boupdate();
|
|
$this->vCalendar = new Horde_Icalendar;
|
|
|
|
if (Api\CalDAV::isJSON())
|
|
{
|
|
self::$path_attr = 'id';
|
|
self::$path_extension = '';
|
|
}
|
|
// since 1.9.003 we allow clients to specify the URL when creating a new event, as specified by CalDAV
|
|
elseif (version_compare($GLOBALS['egw_info']['apps']['calendar']['version'], '1.9.003', '>='))
|
|
{
|
|
self::$path_attr = 'caldav_name';
|
|
self::$path_extension = '';
|
|
}
|
|
}
|
|
|
|
/**
|
|
* Get grants of current user and app
|
|
*
|
|
* Overwritten to return rights modified for certain user-agents (eg. Outlook CalDAV Synchroniser) in the consturctor.
|
|
*
|
|
* @return array user-id => Api\Acl::ADD|Api\Acl::READ|Api\Acl::EDIT|Api\Acl::DELETE pairs
|
|
*/
|
|
public function get_grants()
|
|
{
|
|
return $this->bo->grants;
|
|
}
|
|
|
|
/**
|
|
* Create the path for an event
|
|
*
|
|
* @param array|int $event
|
|
* @return string
|
|
*/
|
|
function get_path($event)
|
|
{
|
|
if (is_numeric($event) && self::$path_attr == 'id')
|
|
{
|
|
$name = $event;
|
|
}
|
|
else
|
|
{
|
|
if (!is_array($event)) $event = $this->bo->read($event);
|
|
$name = $event[self::$path_attr];
|
|
}
|
|
$name .= self::$path_extension;
|
|
//error_log(__METHOD__.'('.array2string($event).") path_attr='".self::$path_attr."', path_extension='".self::$path_extension."' returning ".array2string($name));
|
|
return $name;
|
|
}
|
|
|
|
const PAST_LIMIT = 100;
|
|
const FUTURE_LIMIT = 365;
|
|
|
|
/**
|
|
* Handle propfind in the calendar folder
|
|
*
|
|
* @param string $path
|
|
* @param array &$options
|
|
* @param array &$files
|
|
* @param int $user account_id
|
|
* @param string $id =''
|
|
* @return mixed boolean true on success, false on failure or string with http status (eg. '404 Not Found')
|
|
*/
|
|
function propfind($path,&$options,&$files,$user,$id='')
|
|
{
|
|
if ($this->debug)
|
|
{
|
|
error_log(__METHOD__."($path,".array2string($options).",,$user,$id)");
|
|
}
|
|
|
|
if ($options['root']['name'] == 'free-busy-query')
|
|
{
|
|
return $this->free_busy_report($path, $options, $user);
|
|
}
|
|
|
|
// ToDo: add parameter to only return id & etag
|
|
$filter = array(
|
|
'users' => $user,
|
|
'enum_recuring' => false,
|
|
'daywise' => false,
|
|
'date_format' => 'server',
|
|
'no_total' => true, // we need no total number of rows (saves extra query)
|
|
'cfs' => array(), // return custom-fields, as we use them to store X- attributes
|
|
);
|
|
foreach(array(
|
|
'start' => $GLOBALS['egw_info']['user']['preferences']['groupdav']['calendar-past-limit'],
|
|
'end' => $GLOBALS['egw_info']['user']['preferences']['groupdav']['calendar-future-limit'],
|
|
) as $name => $value)
|
|
{
|
|
if (!is_numeric($value))
|
|
{
|
|
$value = $name == 'start' ? self::PAST_LIMIT : self::FUTURE_LIMIT;
|
|
}
|
|
$filter[$name] = $this->bo->now + 24*3600*($name == 'start' ? -1 : 1)*abs($value);
|
|
}
|
|
if ($this->client_shared_uid_exceptions) // do NOT return (non-virtual) exceptions
|
|
{
|
|
$filter['query'] = array('cal_reference' => 0);
|
|
}
|
|
|
|
if ($path == '/calendar/')
|
|
{
|
|
$filter['filter'] = 'owner';
|
|
}
|
|
// scheduling inbox, shows only not yet accepted or rejected events
|
|
elseif (substr($path,-7) == '/inbox/')
|
|
{
|
|
$filter['filter'] = 'unknown';
|
|
$filter['start'] = $this->bo->now; // only return future invitations
|
|
}
|
|
// ToDo: not sure what scheduling outbox is supposed to show, leave it empty for now
|
|
elseif (substr($path,-8) == '/outbox/')
|
|
{
|
|
return true;
|
|
}
|
|
else
|
|
{
|
|
$filter['filter'] = 'default'; // not rejected
|
|
}
|
|
|
|
// process REPORT filters or multiget href's
|
|
$nresults = null;
|
|
if (($id || $options['root']['name'] != 'propfind') && !$this->_report_filters($options, $filter, $id, $nresults))
|
|
{
|
|
// return empty collection, as iCal under iOS 5 had problems with returning "404 Not found" status
|
|
// when trying to request not supported components, eg. VTODO on a calendar collection
|
|
return true;
|
|
}
|
|
if ($id) $path = dirname($path).'/'; // caldav_name get's added anyway in the callback
|
|
|
|
if ($this->debug > 1)
|
|
{
|
|
error_log(__METHOD__."($path,,,$user,$id) filter=".array2string($filter));
|
|
}
|
|
|
|
// rfc 6578 sync-collection report: filter for sync-token is already set in _report_filters
|
|
if ($options['root']['name'] === 'sync-collection')
|
|
{
|
|
// callback to query sync-token, after propfind_callbacks / iterator is run and
|
|
// stored max. modification-time in $this->sync_collection_token
|
|
$files['sync-token'] = array($this, 'get_sync_collection_token');
|
|
$files['sync-token-params'] = array($path, $user);
|
|
|
|
$this->sync_collection_token = $this->more_results = null;
|
|
|
|
$filter['order'] = 'cal_modified ASC'; // return oldest modifications first
|
|
$filter['sync-collection'] = true;
|
|
// no end-date / limit into the future, as unchanged entries would never be transferted later on
|
|
unset($filter['end']);
|
|
}
|
|
|
|
// check if we have to return the full calendar data or just the etag's
|
|
if (!($filter['calendar_data'] = $options['props'] == 'all' &&
|
|
$options['root']['ns'] == Api\CalDAV::CALDAV || isset($_GET['download'])) && is_array($options['props']))
|
|
{
|
|
foreach($options['props'] as $prop)
|
|
{
|
|
if ($prop['name'] == 'calendar-data')
|
|
{
|
|
$filter['calendar_data'] = true;
|
|
break;
|
|
}
|
|
}
|
|
}
|
|
|
|
if (isset($nresults) && $options['root']['name'] === 'sync-collection')
|
|
{
|
|
unset($filter['no_total']); // we need the total!
|
|
$files['files'] = $this->propfind_generator($path, $filter, $files['files'], (int)$nresults);
|
|
}
|
|
else
|
|
{
|
|
$files['files'] = $this->propfind_generator($path, $filter, $files['files']);
|
|
}
|
|
if (isset($_GET['download']))
|
|
{
|
|
$this->output_vcalendar($files['files']);
|
|
}
|
|
return true;
|
|
}
|
|
|
|
/**
|
|
* Download whole calendar as big ics file
|
|
*
|
|
* @param iterator|array $files
|
|
*/
|
|
function output_vcalendar($files)
|
|
{
|
|
// todo ETag logic with CTag to not download unchanged calendar again
|
|
Api\Header\Content::type('calendar.ics', 'text/calendar');
|
|
|
|
$n = 0;
|
|
foreach($files as $file)
|
|
{
|
|
if (!$n++) continue; // first entry is collection itself
|
|
|
|
$icalendar = $file['props']['calendar-data']['val'];
|
|
if (($start = strpos($icalendar, 'BEGIN:VEVENT')) !== false &&
|
|
($end = strrpos($icalendar, 'END:VCALENDAR')) !== false)
|
|
{
|
|
if ($n === 2)
|
|
{
|
|
// skip X-CALENDARSERVER-ACCESS:CONFIDENTIAL, as it is on VCALENDAR not VEVENT level
|
|
if (($x_calendarserver_access = strpos($icalendar, 'X-CALENDARSERVER-ACCESS:')) !== false)
|
|
{
|
|
echo substr($icalendar, 0, $x_calendarserver_access);
|
|
}
|
|
// skip timezones, as we would need to collect them from all events
|
|
// ans most clients understand timezone by reference anyway
|
|
elseif (($tz = strpos($icalendar, 'BEGIN:VTIMEZONE')) !== false)
|
|
{
|
|
echo substr($icalendar, 0, $tz);
|
|
}
|
|
else
|
|
{
|
|
echo substr($icalendar, 0, $start);
|
|
}
|
|
}
|
|
echo substr($icalendar, $start, $end-$start);
|
|
}
|
|
}
|
|
if ($icalendar && $end)
|
|
{
|
|
echo "END:VCALENDAR\n";
|
|
}
|
|
exit();
|
|
}
|
|
|
|
/**
|
|
* Chunk-size for DB queries of propfind_generator
|
|
*/
|
|
const CHUNK_SIZE = 500;
|
|
|
|
/**
|
|
* Generator for propfind with ability to skip reporting not found ids
|
|
*
|
|
* @param string $path
|
|
* @param array& $filter
|
|
* @param array $extra extra resources like the collection itself
|
|
* @param int|null $nresults option limit of number of results to report
|
|
* @return Generator<array with values for keys path and props>
|
|
*/
|
|
function propfind_generator($path, array &$filter, array $extra=[], $nresults=null)
|
|
{
|
|
if ($this->debug) $starttime = microtime(true);
|
|
|
|
$calendar_data = $filter['calendar_data'];
|
|
unset($filter['calendar_data']);
|
|
|
|
// yield extra resources like the root itself
|
|
$yielded = 0;
|
|
foreach($extra as $resource)
|
|
{
|
|
if (++$yielded && isset($nresults) && $yielded > $nresults)
|
|
{
|
|
$this->sync_collection_token = Api\DateTime::user2server($resource['modified'], 'ts')-1;
|
|
$this->more_results = true;
|
|
return;
|
|
}
|
|
yield $resource;
|
|
}
|
|
$sync_collection = $filter['sync-collection'];
|
|
|
|
$events = null;
|
|
$is_jscalendar = Api\CalDAV::isJSON();
|
|
for($chunk=0; (!$chunk || count($events) === self::CHUNK_SIZE) && // stop after we have not got a full chunk
|
|
($events =& $this->bo->search([
|
|
'offset' => $chunk*self::CHUNK_SIZE,
|
|
'num_rows' => self::CHUNK_SIZE,
|
|
'date_format' => $is_jscalendar ? 'object' : 'server',
|
|
]+$filter)); ++$chunk)
|
|
{
|
|
foreach($events as $event)
|
|
{
|
|
$no_active_participants = !$this->hasActiveParticipants($event, $filter['users'], $exceptions);
|
|
|
|
if (++$yielded && isset($nresults) && $yielded > $nresults)
|
|
{
|
|
$this->sync_collection_token = Api\DateTime::user2server($event['modified'], 'ts')-1;
|
|
$this->more_results = true;
|
|
return;
|
|
}
|
|
// sync-collection report: deleted entries need to be reported without properties, same for rejected or deleted invitations
|
|
if ($sync_collection && ($event['deleted'] && !$event['cal_reference'] ||
|
|
//in_array($event['participants'][$filter['users']][0] ?? '', array('R','X')) ||
|
|
$no_active_participants))
|
|
{
|
|
// remove event from requested multiget ids, to be able to report not found urls
|
|
if (!empty($this->requested_multiget_ids) && ($k = array_search($event[self::$path_attr], $this->requested_multiget_ids)) !== false)
|
|
{
|
|
unset($this->requested_multiget_ids[$k]);
|
|
}
|
|
yield ['path' => $path.urldecode($this->get_path($event))];
|
|
continue;
|
|
}
|
|
// for a regular propfind/multiget-report we must NOT return deleted or rejected events
|
|
if (!$sync_collection && $no_active_participants)
|
|
{
|
|
continue;
|
|
}
|
|
// remove event from requested multiget ids, to be able to report not found urls
|
|
if (!empty($this->requested_multiget_ids) && ($k = array_search($event[self::$path_attr], $this->requested_multiget_ids)) !== false)
|
|
{
|
|
unset($this->requested_multiget_ids[$k]);
|
|
}
|
|
$schedule_tag = null;
|
|
$etag = $this->get_etag($event, $schedule_tag);
|
|
|
|
//header('X-EGROUPWARE-EVENT-'.$event['id'].': '.$event['title'].': '.date('Y-m-d H:i:s',$event['start']).' - '.date('Y-m-d H:i:s',$event['end']));
|
|
$props = array(
|
|
'getcontenttype' => $is_jscalendar ? Api\CalDAV\JsCalendar::MIME_TYPE_JSEVENT :
|
|
($this->agent != 'kde' ? 'text/calendar; charset=utf-8; component=VEVENT' : 'text/calendar'),
|
|
'getetag' => '"'.$etag.'"',
|
|
'displayname' => $event['title'],
|
|
'getlastmodified' => Api\DateTime::user2server($event['modified'], 'ts'),
|
|
// user and timestamp of creation or last modification of event, used in calendarserver only for shared calendars
|
|
'created-by' => Api\CalDAV::mkprop(Api\CalDAV::CALENDARSERVER, 'created-by',
|
|
$this->_created_updated_by_prop($event['creator'], $event['created'])),
|
|
'updated-by' => Api\CalDAV::mkprop(Api\CalDAV::CALENDARSERVER, 'updated-by',
|
|
$this->_created_updated_by_prop($event['modifier'], $event['modified'])),
|
|
);
|
|
if ($this->use_schedule_tag)
|
|
{
|
|
$props['schedule-tag'] = Api\CalDAV::mkprop(Api\CalDAV::CALDAV, 'schedule-tag', '"'.$schedule_tag.'"');
|
|
}
|
|
//error_log(__FILE__ . __METHOD__ . "Calendar Data : $calendar_data");
|
|
if ($calendar_data)
|
|
{
|
|
$content = $this->iCal($event, $filter['users'],
|
|
strpos($path, '/inbox/') !== false ? 'REQUEST' : null,
|
|
!isset($calendar_data['children']['expand']) ? false :
|
|
($calendar_data['children']['expand']['attrs'] ?: true), $exceptions, $is_jscalendar ? false : null);
|
|
$props['getcontentlength'] = bytes($is_jscalendar ? json_encode($content) : $content);
|
|
$props['calendar-data'] = Api\CalDAV::mkprop(Api\CalDAV::CALDAV,'calendar-data',$content);
|
|
}
|
|
/* Calendarserver reports new events with schedule-changes: action: create, which iCal request
|
|
* adding it, unfortunately does not lead to showing the new event in the users inbox
|
|
if (strpos($path, '/inbox/') !== false && $this->caldav->prop_requested('schedule-changes'))
|
|
{
|
|
$props['schedule-changes'] = Api\CalDAV::mkprop(Api\CalDAV::CALENDARSERVER,'schedule-changes',array(
|
|
Api\CalDAV::mkprop(Api\CalDAV::CALENDARSERVER,'dtstamp',gmdate('Ymd\THis',$event['created']).'Z'),
|
|
Api\CalDAV::mkprop(Api\CalDAV::CALENDARSERVER,'action',array(
|
|
Api\CalDAV::mkprop(Api\CalDAV::CALENDARSERVER,'create',''),
|
|
)),
|
|
));
|
|
}*/
|
|
yield $this->add_resource($path, $event, $props);
|
|
}
|
|
}
|
|
// report not found multiget urls
|
|
if (!empty($this->requested_multiget_ids))
|
|
{
|
|
foreach($this->requested_multiget_ids as $id)
|
|
{
|
|
if (++$yielded && isset($nresults) && $yielded > $nresults)
|
|
{
|
|
return;
|
|
}
|
|
yield ['path' => $path.$id.self::$path_extension];
|
|
}
|
|
}
|
|
// sync-collection report --> return modified of last contact as sync-token
|
|
if ($sync_collection)
|
|
{
|
|
$this->sync_collection_token = $event['modified'];
|
|
}
|
|
|
|
if ($this->debug)
|
|
{
|
|
error_log(__METHOD__."($path) took ".(microtime(true) - $starttime).
|
|
" to return $yielded resources");
|
|
}
|
|
}
|
|
|
|
/**
|
|
* Check an event has active (not rejected or deleted) participants against an (array of) user- or group-id(s)
|
|
*
|
|
* For recurring events / series-master we have to check all exceptions too!
|
|
* For a group-id we also check against all members and for a user-id we also check the memberships!
|
|
*
|
|
* @param array $event
|
|
* @param int|int[] $users user(s) to check
|
|
* @param array|null &$exceptions on return exceptions to the series as returned by self::get_series() ($expand=false!)
|
|
* @return bool true: user(s) is an active participant, or false if not (incl. all exceptions for recurring events)
|
|
*/
|
|
protected function hasActiveParticipants(array $event, $users, array &$exceptions=null) : bool
|
|
{
|
|
$exceptions = null;
|
|
if (!is_array($users))
|
|
{
|
|
$add = $users < 0 ? 'members' : 'memberships';
|
|
$users = array_merge([$users], Api\Accounts::getInstance()->$add($users, true) ?: []);
|
|
}
|
|
// return true event(-master) has active participants
|
|
foreach(array_intersect_key($event['participants'], array_flip($users)) as $status)
|
|
{
|
|
if (!in_array($status[0], ['R', 'X']))
|
|
{
|
|
//error_log(__METHOD__."(cal_id=$event[id]: $event[title], cal_reference=$event[cal_reference], participants=".json_encode($event['participants']).", ".json_encode($users)." returning true");
|
|
return true;
|
|
}
|
|
}
|
|
// return false for regular / non-recurring events
|
|
if (empty($event['recur_type']))
|
|
{
|
|
return false;
|
|
}
|
|
|
|
// check exceptions for recurring event
|
|
$exceptions =& self::get_series($event['uid'], $this->bo, false, $users[0], $event);
|
|
foreach($exceptions as $exception)
|
|
{
|
|
if (empty($exception['reference'])) continue; // master / identical to $event and already checked
|
|
|
|
if ($this->hasActiveParticipants($exception, $users))
|
|
{
|
|
return true;
|
|
}
|
|
}
|
|
//error_log(__METHOD__."(cal_id=$event[id]: $event[title], cal_reference=$event[cal_reference], participants=".json_encode($event['participants']).", ".json_encode($users)." returning false");
|
|
// if we get here, given user(s) are NOT an active participant of any exception or has been deleted or rejected them all
|
|
return false;
|
|
}
|
|
|
|
/**
|
|
* Return Calendarserver:(created|updated)-by sub-properties for a given user and time
|
|
*
|
|
* <created-by xmlns='http://calendarserver.org/ns/'>
|
|
* <first-name>Ralf</first-name>
|
|
* <last-name>Becker</last-name>
|
|
* <dtstamp>20121002T092006Z</dtstamp>
|
|
* <href xmlns='DAV:'>mailto:farktronix@me.com</href>
|
|
* </created-by>
|
|
*
|
|
* @param int $user
|
|
* @param int $time
|
|
* @return array with subprops
|
|
*/
|
|
private function _created_updated_by_prop($user, $time)
|
|
{
|
|
$props = array();
|
|
foreach(array(
|
|
'first-name' => 'account_firstname',
|
|
'last-name' => 'account_lastname',
|
|
'href' => 'account_email',
|
|
) as $prop => $name)
|
|
{
|
|
if ($user && ($val = $this->accounts->id2name($user, $name)))
|
|
{
|
|
$ns = Api\CalDAV::CALENDARSERVER;
|
|
if ($prop == 'href')
|
|
{
|
|
$ns = '';
|
|
$val = 'mailto:'.$val;
|
|
}
|
|
$props[$prop] = $ns ? Api\CalDAV::mkprop($ns, $prop, $val) : Api\CalDAV::mkprop($prop, $val);
|
|
}
|
|
}
|
|
if ($time)
|
|
{
|
|
$dtstamp = Api\DateTime::to($time, 'object');
|
|
$dtstamp->setTimezone(new DateTimeZone('utc'));
|
|
$props['dtstamp'] = Api\CalDAV::mkprop(Api\CalDAV::CALENDARSERVER, 'dtstamp', $dtstamp->format('Ymd\\This\\Z'));
|
|
}
|
|
//error_log(__METHOD__."($user, $time) returning ".array2string($props));
|
|
return $props ?: '';
|
|
}
|
|
|
|
/**
|
|
* Process the filters from the CalDAV REPORT request
|
|
*
|
|
* @param array $options
|
|
* @param array &$cal_filters
|
|
* @param string $id
|
|
* @param int &$nresults on return limit for number of results or unchanged/null
|
|
* @return boolean true if filter could be processed
|
|
*/
|
|
function _report_filters($options, &$cal_filters, $id, &$nresults)
|
|
{
|
|
if ($options['filters'])
|
|
{
|
|
// unset default start & end
|
|
$cal_start = $cal_filters['start']; unset($cal_filters['start']);
|
|
$cal_end = $cal_filters['end']; unset($cal_filters['end']);
|
|
$num_filters = count($cal_filters);
|
|
|
|
foreach($options['filters'] as $filter)
|
|
{
|
|
switch($filter['name'])
|
|
{
|
|
case 'comp-filter':
|
|
if ($this->debug > 1) error_log(__METHOD__."($options[path],...) comp-filter='{$filter['attrs']['name']}'");
|
|
|
|
switch($filter['attrs']['name'])
|
|
{
|
|
case 'VTODO':
|
|
return false; // return nothing for now, todo: check if we can pass it on to the infolog handler
|
|
// todos are handled by the infolog handler
|
|
//$infolog_handler = new groupdav_infolog();
|
|
//return $infolog_handler->propfind($options['path'],$options,$options['files'],$user,$method);
|
|
case 'VCALENDAR':
|
|
case 'VEVENT':
|
|
break; // that's our default anyway
|
|
}
|
|
break;
|
|
case 'prop-filter':
|
|
if ($this->debug > 1) error_log(__METHOD__."($options[path],...) prop-filter='{$filter['attrs']['name']}'");
|
|
$prop_filter = $filter['attrs']['name'];
|
|
break;
|
|
case 'text-match':
|
|
if ($this->debug > 1) error_log(__METHOD__."($options[path],...) text-match: $prop_filter='{$filter['data']}'");
|
|
if (!isset($this->filter_prop2cal[strtoupper($prop_filter)]))
|
|
{
|
|
if ($this->debug) error_log(__METHOD__."($options[path],".array2string($options).",...) unknown property '$prop_filter' --> ignored");
|
|
}
|
|
else
|
|
{
|
|
$cal_filters['query'][$this->filter_prop2cal[strtoupper($prop_filter)]] = $filter['data'];
|
|
}
|
|
unset($prop_filter);
|
|
break;
|
|
case 'param-filter':
|
|
if ($this->debug) error_log(__METHOD__."($options[path],...) param-filter='{$filter['attrs']['name']}' not (yet) implemented!");
|
|
break;
|
|
case 'time-range':
|
|
if ($this->debug > 1) error_log(__FILE__ . __METHOD__."($options[path],...) time-range={$filter['attrs']['start']}-{$filter['attrs']['end']}");
|
|
if (!empty($filter['attrs']['start']))
|
|
{
|
|
$cal_filters['start'] = $this->vCalendar->_parseDateTime($filter['attrs']['start']);
|
|
}
|
|
if (!empty($filter['attrs']['end']))
|
|
{
|
|
$cal_filters['end'] = $this->vCalendar->_parseDateTime($filter['attrs']['end']);
|
|
}
|
|
break;
|
|
default:
|
|
if ($this->debug) error_log(__METHOD__."($options[path],".array2string($options).",...) unknown filter --> ignored");
|
|
break;
|
|
}
|
|
}
|
|
if (count($cal_filters) == $num_filters) // no filters set --> restore default start and end time
|
|
{
|
|
$cal_filters['start'] = $cal_start;
|
|
$cal_filters['end'] = $cal_end;
|
|
}
|
|
}
|
|
|
|
// parse limit from $options['other']
|
|
/* Example limit
|
|
<B:limit>
|
|
<B:nresults>10</B:nresults>
|
|
</B:limit>
|
|
*/
|
|
foreach((array)$options['other'] as $option)
|
|
{
|
|
switch($option['name'])
|
|
{
|
|
case 'nresults':
|
|
$nresults = (int)$option['data'];
|
|
//error_log(__METHOD__."(...) options[other]=".array2string($options['other'])." --> nresults=$nresults");
|
|
break;
|
|
case 'limit':
|
|
break;
|
|
case 'href':
|
|
break; // from addressbook-multiget, handled below
|
|
// rfc 6578 sync-report
|
|
case 'sync-token':
|
|
if (!empty($option['data']))
|
|
{
|
|
$parts = explode('/', $option['data']);
|
|
$sync_token = array_pop($parts);
|
|
$cal_filters['query'][] = 'cal_modified>'.(int)$sync_token;
|
|
$cal_filters['filter'] = 'everything'; // to return deleted entries too
|
|
// no standard time-range!
|
|
unset($cal_filters['start']);
|
|
}
|
|
break;
|
|
case 'sync-level':
|
|
if ($option['data'] != '1')
|
|
{
|
|
$this->caldav->log(__METHOD__."(...) only sync-level {$option['data']} requested, but only 1 supported! options[other]=".array2string($options['other']));
|
|
}
|
|
break;
|
|
default:
|
|
$this->caldav->log(__METHOD__."(...) unknown xml tag '{$option['name']}': options[other]=".array2string($options['other']));
|
|
break;
|
|
}
|
|
}
|
|
// multiget or propfind on a given id
|
|
//error_log(__FILE__ . __METHOD__ . "multiget of propfind:");
|
|
$this->requested_multiget_ids = null;
|
|
if ($options['root']['name'] == 'calendar-multiget' || $id)
|
|
{
|
|
// no standard time-range!
|
|
unset($cal_filters['start']);
|
|
unset($cal_filters['end']);
|
|
|
|
if ($id)
|
|
{
|
|
$cal_filters['query'][self::$path_attr] = self::$path_extension ?
|
|
basename($id,self::$path_extension) : $id;
|
|
}
|
|
else // fetch all given url's
|
|
{
|
|
$this->requested_multiget_ids = [];
|
|
foreach($options['other'] as $option)
|
|
{
|
|
if ($option['name'] == 'href')
|
|
{
|
|
$parts = explode('/',$option['data']);
|
|
if (($id = urldecode(array_pop($parts))))
|
|
{
|
|
$this->requested_multiget_ids[] = self::$path_extension ?
|
|
basename($id,self::$path_extension) : $id;
|
|
}
|
|
}
|
|
}
|
|
$cal_filters['query'][self::$path_attr] = $this->requested_multiget_ids;
|
|
}
|
|
|
|
if ($this->debug > 1)
|
|
{
|
|
error_log(__FILE__ . __METHOD__ ."($options[path],...,$id) calendar-multiget: ids=".
|
|
implode(',', $this->requested_multiget_ids).', cal_filters='.json_encode($cal_filters));
|
|
}
|
|
}
|
|
return true;
|
|
}
|
|
|
|
/**
|
|
* Handle get request for an event
|
|
*
|
|
* @param array &$options
|
|
* @param int $id
|
|
* @param int $user =null account_id
|
|
* @return mixed boolean true on success, false on failure or string with http status (eg. '404 Not Found')
|
|
*/
|
|
function get(&$options,$id,$user=null)
|
|
{
|
|
if (!is_array($event = $this->_common_get_put_delete('GET',$options,$id)))
|
|
{
|
|
return $event;
|
|
}
|
|
|
|
// jsEvent or iCal
|
|
if (($type=Api\CalDAV::isJSON($_SERVER['HTTP_ACCEPT'])) || ($type=Api\CalDAV::isJSON()))
|
|
{
|
|
$options['data'] = $this->iCal($event, $user, strpos($options['path'], '/inbox/') !== false ? 'REQUEST' : null, false, null, $type);
|
|
$options['mimetype'] = Api\CalDAV\JsCalendar::MIME_TYPE_JSEVENT.';charset=utf-8';
|
|
}
|
|
else
|
|
{
|
|
$options['data'] = $this->iCal($event, $user, strpos($options['path'], '/inbox/') !== false ? 'REQUEST' : null, false, null);
|
|
$options['mimetype'] = 'text/calendar; charset=utf-8';
|
|
}
|
|
header('Content-Encoding: identity');
|
|
$schedule_tag = null;
|
|
header('ETag: "'.$this->get_etag($event, $schedule_tag).'"');
|
|
if ($this->use_schedule_tag)
|
|
{
|
|
header('Schedule-Tag: "'.$schedule_tag.'"');
|
|
}
|
|
return true;
|
|
}
|
|
|
|
/**
|
|
* Generate an iCal for the given event
|
|
*
|
|
* Taking into account virtual and real exceptions for recurring events
|
|
*
|
|
* @param array $event
|
|
* @param int $user =null account_id of calendar to display
|
|
* @param string $method =null e.g. 'PUBLISH' for inbox, nothing anywhere else
|
|
* @param boolean|array $expand =false true or array with values for 'start', 'end' to expand recurrences
|
|
* @param array|null $events as returned by get_series() for !$expand (to not read them again)
|
|
* @param bool|"pretty"|null $json null: iCal, false: return array with JSCalendar data, true+"pretty": return json-serialized JSCalendar
|
|
* @return string|array array if $json === false
|
|
*/
|
|
private function iCal(array $event,$user=null, $method=null, $expand=false, array $events=null, $json=null)
|
|
{
|
|
static $handler = null;
|
|
if (is_null($handler)) $handler = $this->_get_handler();
|
|
|
|
if (!$user) $user = $GLOBALS['egw_info']['user']['account_id'];
|
|
|
|
// only return alarms in own calendar, not other users calendars
|
|
if ($user != $GLOBALS['egw_info']['user']['account_id'])
|
|
{
|
|
//error_log(__METHOD__.'('.array2string($event).", $user) clearing alarms");
|
|
$event['alarm'] = array();
|
|
}
|
|
else if ($event['##videoconference'])
|
|
{
|
|
// Add video conference link to description for user's own calendar
|
|
$avatar = new Api\Contacts\Photo("account:$user",
|
|
// disable sharing links currently, as sharing links from a different EGroupware user destroy the session
|
|
true);
|
|
|
|
// wrap in try and catch in case videoconference throws exceptions. e.g. BBB server exceptions
|
|
try {
|
|
$link = EGroupware\Status\Videoconference\Call::genMeetingUrl($event['##videoconference'], [
|
|
'name' => Api\Accounts::username($user),
|
|
'email' => Api\Accounts::id2name($user, 'account_email'),
|
|
'avatar' => (string)$avatar,
|
|
'account_id' => $user,
|
|
'cal_id' => $event['id'],
|
|
'notify_only' => true
|
|
], ['participants' =>array_filter($event['participants'], function($key){return is_numeric($key);}, ARRAY_FILTER_USE_KEY)], $event['start_date'], $event['end_date']);
|
|
}catch (Exception $e)
|
|
{
|
|
//error_log(__METHOD__.'()'.$e->getMessage());
|
|
// do nothing
|
|
}
|
|
|
|
$event['description'] = lang('Videoconference').":\n$link\n\n".$event['description'];
|
|
}
|
|
|
|
// for recurring events we have to add the exceptions
|
|
if ($this->client_shared_uid_exceptions && $event['recur_type'] && !empty($event['uid']))
|
|
{
|
|
// some clients (Apple, eMclient) do NOT understand RDATE, therefore we expand the recurrences
|
|
if ($event['recur_type'] == calendar_rrule::RDATE && in_array(Api\CalDAV\Handler::get_agent(), ['dataaccess', 'iphone', 'calendaragent', 'emclient']))
|
|
{
|
|
$expand = $readd_master = true;
|
|
}
|
|
if (is_array($expand))
|
|
{
|
|
if (isset($expand['start'])) $expand['start'] = $this->vCalendar->_parseDateTime($expand['start']);
|
|
if (isset($expand['end'])) $expand['end'] = $this->vCalendar->_parseDateTime($expand['end']);
|
|
}
|
|
// pass in original event as master, as it has correct start-date even if first recurrence is an exception
|
|
if ($expand || !isset($events))
|
|
{
|
|
$events =& self::get_series($event['uid'], $this->bo, $expand, $user, $event, isset($json) ? 'object' : 'server');
|
|
|
|
if (!empty($readd_master))
|
|
{
|
|
array_unshift($events, $event);
|
|
}
|
|
}
|
|
// as alarm is now only on next recurrence, set alarm from original event on master
|
|
if ($event['alarm']) $events[0]['alarm'] = $event['alarm'];
|
|
}
|
|
else
|
|
{
|
|
$events = array($event);
|
|
|
|
if(!$this->client_shared_uid_exceptions && $event['reference'])
|
|
{
|
|
$events[0]['uid'] .= '-'.$event['id']; // force a different uid
|
|
}
|
|
}
|
|
if (isset($json))
|
|
{
|
|
// master aka $events[0] might not be set, for a series where current user only participates in one or *more* exceptions
|
|
return Api\CalDAV\JsCalendar::JsEvent(array_shift($events), $json, $events);
|
|
}
|
|
return $handler->exportVCal($events, '2.0', $method);
|
|
}
|
|
|
|
/**
|
|
* Get array with events of a series identified by its UID (master and all exceptions)
|
|
*
|
|
* Maybe that should be part of calendar_bo
|
|
*
|
|
* @param string $uid UID
|
|
* @param calendar_bo $bo =null calendar_bo object to reuse for search call
|
|
* @param boolean|array $expand =false true or array with values for 'start', 'end' to expand recurrences
|
|
* @param int $user =null account_id of calendar to display, to remove master, if current user does not participate in
|
|
* @param array $master =null use provided event as master to fix wrong start-date if first recurrence is an exception
|
|
* @return array
|
|
*/
|
|
private static function &get_series($uid,calendar_bo $bo=null, $expand=false, $user=null, $master=null, $date_format='server')
|
|
{
|
|
if (is_null($bo)) $bo = new calendar_boupdate();
|
|
|
|
$params = array(
|
|
'query' => array('cal_uid' => $uid),
|
|
'filter' => 'owner', // return all possible entries
|
|
'daywise' => false,
|
|
'date_format' => $date_format,
|
|
'cfs' => array(), // read cfs as we use them to store X- attributes
|
|
);
|
|
if (is_array($expand)) $params += $expand;
|
|
|
|
if (!($events =& $bo->search($params)))
|
|
{
|
|
$events = [];
|
|
return $events;
|
|
}
|
|
|
|
// find master, which is not always first event, e.g. when first event is an exception
|
|
$exceptions = array();
|
|
foreach($events as $k => &$recurrence)
|
|
{
|
|
if ($recurrence['recur_type'])
|
|
{
|
|
if (!isset($master)) $master = $recurrence;
|
|
$exceptions =& $master['recur_exception'];
|
|
unset($events[$k]);
|
|
break;
|
|
}
|
|
}
|
|
// if recurring event starts in future behind horizont, nothing will be returned by bo::search()
|
|
if (!isset($master)) $master = $bo->read($uid, null, false, $date_format);
|
|
|
|
foreach($events as $k => &$recurrence)
|
|
{
|
|
//error_log(__FILE__.'['.__LINE__.'] '.__METHOD__."($uid)[$k]:" . array2string($recurrence));
|
|
if ($master && $recurrence['reference'] && $recurrence['reference'] != $master['id'])
|
|
{
|
|
unset($events[$k]);
|
|
continue; // same uid, but references a different event or its own master
|
|
}
|
|
if (!$master || $recurrence['id'] != $master['id']) // real exception
|
|
{
|
|
// user is NOT participating in this exception
|
|
if ($user && !self::isParticipant($recurrence, $user))
|
|
{
|
|
// if he is NOT in master, delete this exception
|
|
if (!$master || !self::isParticipant($master, $user))
|
|
{
|
|
unset($events[$k]);
|
|
continue;
|
|
}
|
|
// otherwise mark him in this exception as rejected
|
|
$recurrence['participants'][$user] = 'R';
|
|
}
|
|
//error_log('real exception: '.array2string($recurrence));
|
|
// remove from masters recur_exception, as exception is included
|
|
// at least Lightning "understands" EXDATE as exception from what's included
|
|
// in the whole resource / VCALENDAR component
|
|
// not removing it causes Lightning to remove the exception itself
|
|
if (($e = array_search($recurrence['recurrence'],$exceptions)) !== false)
|
|
{
|
|
unset($exceptions[$e]);
|
|
}
|
|
continue; // nothing to change
|
|
}
|
|
// add alarms from master to recurrences, as clients otherwise have no alarms on virtual exceptions
|
|
if ($master && $master['alarm'])
|
|
{
|
|
$recurrence['alarm'] = $master['alarm'];
|
|
}
|
|
// now we need to check if this recurrence is an exception
|
|
if (!$expand && $master && $master['participants'] == $recurrence['participants'])
|
|
{
|
|
//error_log('NO exception: '.array2string($recurrence));
|
|
unset($events[$k]); // no exception --> remove it
|
|
continue;
|
|
}
|
|
// this is a virtual exception now (no extra event/cal_id in DB)
|
|
//error_log('virtual exception: '.array2string($recurrence));
|
|
$recurrence['recurrence'] = $recurrence['start'];
|
|
if ($master) $recurrence['reference'] = $master['id'];
|
|
$recurrence['recur_type'] = MCAL_RECUR_NONE; // is set, as this is a copy of the master
|
|
// not for included exceptions (Lightning): $master['recur_exception'][] = $recurrence['start'];
|
|
}
|
|
// only add master if we are not expanding and current user participates in master (and not just some exceptions)
|
|
// also need to add master, if we have no (other) $events eg. birthday noone every accepted/rejected
|
|
if (!$expand && $master && (!$user || self::isParticipant($master, $user) || !$events))
|
|
{
|
|
$events = array_merge(array($master), $events);
|
|
}
|
|
return $events;
|
|
}
|
|
|
|
/**
|
|
* Check if $user is a participant of given $event incl. group-invitations
|
|
*
|
|
* @param array $event
|
|
* @param int|string $user
|
|
* @return boolean
|
|
*/
|
|
public static function isParticipant(array $event, $user)
|
|
{
|
|
return isset($event['participants'][$user]) ||
|
|
// for users and group-invitations we need to check memberships of $user too
|
|
$user > 0 && array_intersect(array_keys($event['participants']),
|
|
(array)$GLOBALS['egw']->accounts->memberships($user, true));
|
|
}
|
|
|
|
/**
|
|
* Handle put request for an event
|
|
*
|
|
* @param array &$options
|
|
* @param int $id
|
|
* @param int $user =null account_id of owner, default null
|
|
* @param string $prefix =null user prefix from path (eg. /ralf from /ralf/addressbook)
|
|
* @return mixed boolean true on success, false on failure or string with http status (eg. '404 Not Found')
|
|
*/
|
|
function put(&$options,$id,$user=null,$prefix=null,$method='PUT')
|
|
{
|
|
if ($this->debug) error_log(__METHOD__."($id, $user)".print_r($options,true));
|
|
|
|
if (!$prefix) $user = null; // /infolog/ does not imply setting the current user (for new entries it's done anyway)
|
|
|
|
// work around missing handling / racecondition in Lightning, if event already exists on server,
|
|
// but Lightning has not yet synced with the server: Lightning just retries the PUT, not GETing the event
|
|
// --> for now we ignore the If-None-Match: "*" as the lesser of two evils ;)
|
|
if (self::get_agent() === 'lightning' && isset($_SERVER['HTTP_IF_NONE_MATCH']) &&
|
|
in_array($_SERVER['HTTP_IF_NONE_MATCH'], array('*', '"*"')))
|
|
{
|
|
unset($_SERVER['HTTP_IF_NONE_MATCH']);
|
|
$workaround_lightning_if_none_match = true;
|
|
}
|
|
|
|
// fix for iCal4OL using WinHTTP only supporting a certain header length
|
|
if (isset($_SERVER['HTTP_IF_SCHEDULE']) && !isset($_SERVER['HTTP_IF_SCHEDULE_TAG_MATCH']))
|
|
{
|
|
$_SERVER['HTTP_IF_SCHEDULE_TAG_MATCH'] = $_SERVER['HTTP_IF_SCHEDULE'];
|
|
}
|
|
// Thunderbird or Lightning: for "412 Precondition Failed" update only participant data, as TB offers user to overwrite server state
|
|
// CalDAVSynchronizer: does NOT handle 412 well and fails the complete sync, updating participant data only is the better option
|
|
$handle_etag_failure_with_partial_update = in_array(self::get_agent(), ['thunderbird', 'lightning', 'caldavsynchronizer']);
|
|
|
|
$return_no_access = true; // as handled by importVCal anyway and allows it to set the status for participants
|
|
$oldEvent = $this->_common_get_put_delete('PUT',$options,$id,$return_no_access,
|
|
isset($_SERVER['HTTP_IF_SCHEDULE_TAG_MATCH']), !$handle_etag_failure_with_partial_update); // dont fail with 412 Precondition Failed in that case
|
|
|
|
if ($oldEvent === '412 Precondition Failed' && $handle_etag_failure_with_partial_update)
|
|
{
|
|
$oldEvent = $this->read($id);
|
|
$this->caldav->log("Handing 412 Precondition Failed for Thunderbird by only updating participant data!");
|
|
}
|
|
elseif (!is_null($oldEvent) && !is_array($oldEvent))
|
|
{
|
|
if ($this->debug) error_log(__METHOD__.': '.print_r($oldEvent,true).function_backtrace());
|
|
return $oldEvent;
|
|
}
|
|
else
|
|
{
|
|
// set it to false, as we have no precondition failure
|
|
$handle_etag_failure_with_partial_update = false;
|
|
}
|
|
|
|
if (is_null($oldEvent) && ($user >= 0 && !$this->bo->check_perms(Acl::ADD, 0, $user) ||
|
|
// if we require an extra invite grant, we fail if that does not exist (bind privilege is not given in that case)
|
|
$this->bo->require_acl_invite && $user && $user != $GLOBALS['egw_info']['user']['account_id'] &&
|
|
!$this->bo->check_acl_invite($user)))
|
|
{
|
|
// we have no add permission on this user's calendar
|
|
// ToDo: create event in current users calendar and invite only $user
|
|
if ($this->debug) error_log(__METHOD__."(,,$user) we have not enough rights on this calendar");
|
|
return '403 Forbidden';
|
|
}
|
|
|
|
$handler = $this->_get_handler();
|
|
$vCalendar = htmlspecialchars_decode($options['content']);
|
|
$charset = null;
|
|
if (!empty($options['content_type']))
|
|
{
|
|
$content_type = explode(';', $options['content_type']);
|
|
if (count($content_type) > 1)
|
|
{
|
|
array_shift($content_type);
|
|
foreach ($content_type as $attribute)
|
|
{
|
|
list($key, $value) = explode('=', $attribute);
|
|
switch (strtolower(trim($key)))
|
|
{
|
|
case 'charset':
|
|
$charset = strtoupper(trim($value));
|
|
}
|
|
}
|
|
}
|
|
}
|
|
|
|
// if path not found, check the UID and return "403 Forbidden" if event is deleted or user has not rights to event with same UID
|
|
if (!isset($oldEvent) && ($events = $handler->icaltoegw($vCalendar)) &&
|
|
($oldEvents = $this->bo->read(['cal_uid' => $events[0]['uid'], 'cal_reference=0'], null, false, 'server')) !== null)
|
|
{
|
|
foreach($oldEvents as $oldEvent)
|
|
{
|
|
if (empty($oldEvent['deleted']))
|
|
{
|
|
break;
|
|
}
|
|
}
|
|
if (!empty($oldEvent['deleted']))
|
|
{
|
|
$this->caldav->log("Event with UID='{$events[0]['uid']}' has already been deleted!");
|
|
return '403 Forbidden';
|
|
}
|
|
// case user has no edit-rights for $oldEvent is handled below
|
|
}
|
|
|
|
if (is_array($oldEvent))
|
|
{
|
|
$eventId = $oldEvent['id'];
|
|
|
|
//client specified a CalDAV Scheduling schedule-tag AND an etag If-Match precondition
|
|
if ($this->use_schedule_tag && isset($_SERVER['HTTP_IF_SCHEDULE_TAG_MATCH']) &&
|
|
isset($_SERVER['HTTP_IF_MATCH']))
|
|
{
|
|
if ($oldEvent['owner'] == $GLOBALS['egw_info']['user']['account_id'])
|
|
{
|
|
$this->caldav->log("Both If-Match and If-Schedule-Tag-Match header given: If-Schedule-Tag-Match ignored for event owner!");
|
|
unset($_SERVER['HTTP_IF_SCHEDULE_TAG_MATCH']);
|
|
}
|
|
else
|
|
{
|
|
$this->caldav->log("Both If-Match and If-Schedule-Tag-Match header given: If-Schedule-Tag-Match takes precedence for participants!");
|
|
}
|
|
}
|
|
// check CalDAV Scheduling schedule-tag precondition
|
|
if ($this->use_schedule_tag && isset($_SERVER['HTTP_IF_SCHEDULE_TAG_MATCH']))
|
|
{
|
|
$schedule_tag_match = $_SERVER['HTTP_IF_SCHEDULE_TAG_MATCH'];
|
|
if ($schedule_tag_match[0] == '"') $schedule_tag_match = substr($schedule_tag_match, 1, -1);
|
|
$schedule_tag = null;
|
|
$this->get_etag($oldEvent, $schedule_tag);
|
|
|
|
if ($schedule_tag_match !== $schedule_tag)
|
|
{
|
|
if ($this->debug) error_log(__METHOD__."(,,$user) schedule_tag mismatch: given '$schedule_tag_match' != '$schedule_tag'");
|
|
// honor Prefer: return=representation for 412 too (no need for client to explicitly reload)
|
|
$this->check_return_representation($options, $id, $user);
|
|
return '412 Precondition Failed';
|
|
}
|
|
}
|
|
// if no edit-rights (aka no organizer), update only attendee stuff: status and alarms
|
|
if (!$this->check_access(Acl::EDIT, $oldEvent) ||
|
|
// only update participant data, if precondition is NOT meet
|
|
$handle_etag_failure_with_partial_update ||
|
|
// we ignored Lightings If-None-Match: "*" --> do not overwrite event, just change status
|
|
!empty($workaround_lightning_if_none_match))
|
|
{
|
|
$user_and_memberships = $GLOBALS['egw']->accounts->memberships($user, true);
|
|
$user_and_memberships[] = $user;
|
|
if (!array_intersect(array_keys($oldEvent['participants']), $user_and_memberships) &&
|
|
// above can be true, if current user is not in master but just a recurrence
|
|
(!$oldEvent['recur_type'] || !($series = self::get_series($oldEvent['uid'], $this->bo))))
|
|
{
|
|
if ($this->debug) error_log(__METHOD__."(,,$user) user $user is NOT an attendee!");
|
|
$ignore_acl = !empty($GLOBALS['egw_info']['server']['caldav_party_crasher_regexp']) &&
|
|
preg_match($GLOBALS['egw_info']['server']['caldav_party_crasher_regexp'], $email=Api\Accounts::id2name($user, 'account_email'));
|
|
if (!$ignore_acl)
|
|
{
|
|
$this->caldav->log("Returning '403 Forbidden' as #$user is NOT a participant of the event!");
|
|
return '403 Forbidden';
|
|
}
|
|
$this->caldav->log("Allowing user #$user because email '$email' matches '{$GLOBALS['egw_info']['server']['caldav_party_crasher_regexp']}'");
|
|
}
|
|
// update only participant status and alarms of current user
|
|
if (($events = $handler->icaltoegw($vCalendar)))
|
|
{
|
|
$modified = 0;
|
|
$master = null;
|
|
foreach($events as $n => $event)
|
|
{
|
|
// for recurrences of event series, we need to read correct recurrence (or if series master is no first event)
|
|
if ($event['recurrence'] || $n && !$event['recurrence'] || isset($series))
|
|
{
|
|
// first try reading (virtual and real) exceptions
|
|
if (!isset($series))
|
|
{
|
|
$series = self::get_series($event['uid'], $this->bo);
|
|
//foreach($series as $s => $sEvent) error_log("series[$s]: ".array2string($sEvent));
|
|
}
|
|
foreach($series as $oldEvent)
|
|
{
|
|
if ($oldEvent['recurrence'] == $event['recurrence']) break;
|
|
}
|
|
// if no exception found, check if it might be just a recurrence (no exception)
|
|
if ($event['recurrence'] && $oldEvent['recurrence'] != $event['recurrence'])
|
|
{
|
|
if (!($oldEvent = $this->bo->read($eventId, $event['recurrence'], true)) ||
|
|
// virtual exceptions have recurrence=0 and recur_date=recurrence (series master or real exceptions have recurence=0)
|
|
!($oldEvent['recur_date'] == $event['recurrence'] || !$event['recurrence'] && !$oldEvent['recurrence']))
|
|
{
|
|
// if recurrence not found --> log it and continue with other recurrence
|
|
$this->caldav->log(__METHOD__."(,,$user) could NOT find recurrence=$event[recurrence]=".Api\DateTime::to($event['recurrence']).' of event series! event='.array2string($event));
|
|
continue;
|
|
}
|
|
}
|
|
}
|
|
if ($this->debug) error_log(__METHOD__."(, $id, $user, '$prefix') eventId=$eventId ($oldEvent[id]), user=$user, old-status='{$oldEvent['participants'][$user]}', new-status='{$event['participants'][$user]}', recurrence=$event[recurrence]=".Api\DateTime::to($event['recurrence']).", event=".array2string($event));
|
|
if (isset($event['participants']) && isset($event['participants'][$user]) &&
|
|
$event['participants'][$user] !== $oldEvent['participants'][$user])
|
|
{
|
|
if (!$this->bo->set_status($oldEvent['id'], $user, $event['participants'][$user],
|
|
// real (not virtual) exceptions use recurrence 0 in egw_cal_user.cal_recurrence!
|
|
$recurrence = $eventId == $oldEvent['id'] ? $event['recurrence'] : 0,
|
|
$ignore_acl))
|
|
{
|
|
if ($this->debug) error_log(__METHOD__."(,,$user) failed to set_status($oldEvent[id], $user, '{$event['participants'][$user]}', $recurrence=".Api\DateTime::to($recurrence).')');
|
|
return '403 Forbidden';
|
|
}
|
|
else
|
|
{
|
|
++$modified;
|
|
if ($this->debug) error_log(__METHOD__."() set_status($oldEvent[id], $user, {$event['participants'][$user]} , $recurrence=".Api\DateTime::to($recurrence).')');
|
|
}
|
|
}
|
|
// import alarms, if given and changed
|
|
if ((array)$event['alarm'] !== (array)$oldEvent['alarm'])
|
|
{
|
|
$event['id'] = $oldEvent['id'];
|
|
if (isset($master) && $event['id'] == $master['id']) // only for pseudo exceptions
|
|
{
|
|
$modified += $handler->sync_alarms($event, (array)$oldEvent['alarm'], $user, $master);
|
|
}
|
|
else
|
|
{
|
|
$modified += $handler->sync_alarms($event, (array)$oldEvent['alarm'], $user);
|
|
}
|
|
}
|
|
if (!isset($master) && !$event['recurrence']) $master = $event;
|
|
}
|
|
if (!$modified) // NO modification, or none we understood --> log it and return Ok: "204 No Content"
|
|
{
|
|
$this->caldav->log(__METHOD__."(,,$user) NO changes for current user events=".array2string($events).', old-event='.array2string($oldEvent));
|
|
}
|
|
$this->put_response_headers($eventId, $options['path'], '204 No Content', self::$path_attr == 'caldav_name');
|
|
|
|
return '204 No Content';
|
|
}
|
|
else
|
|
{
|
|
$this->caldav->log("Could NOT parse any event(s) from iCal --> returning 400 Bad Request!");
|
|
return '400 Bad Request';
|
|
}
|
|
if ($this->debug && !isset($events)) error_log(__METHOD__."(,,$user) only schedule-tag given for event without participants (only calendar owner) --> handle as regular PUT");
|
|
}
|
|
if ($return_no_access)
|
|
{
|
|
$retval = true;
|
|
}
|
|
else
|
|
{
|
|
$retval = '204 No Content';
|
|
|
|
// lightning will pop up the alarm, as long as the Sequence (etag) does NOT change
|
|
// --> update the etag alone, if user has no edit rights
|
|
if ($this->agent == 'lightning' && !$this->check_access(Acl::EDIT, $oldEvent) &&
|
|
isset($oldEvent['participants'][$GLOBALS['egw_info']['user']['account_id']]))
|
|
{
|
|
// just update etag in database
|
|
$GLOBALS['egw']->db->update($this->bo->so->cal_table,'cal_etag=cal_etag+1',array(
|
|
'cal_id' => $eventId,
|
|
),__LINE__,__FILE__,'calendar');
|
|
}
|
|
}
|
|
}
|
|
// schedule tag with deleted event should not create a new entry, therefore returning 404 Not Found
|
|
elseif (!isset($oldEvent) && isset($_SERVER['HTTP_IF_SCHEDULE_TAG_MATCH']))
|
|
{
|
|
return '404 Not Found';
|
|
}
|
|
else
|
|
{
|
|
// new entry
|
|
$eventId = -1;
|
|
$retval = '201 Created';
|
|
}
|
|
|
|
$type = null;
|
|
if (($is_json=Api\CalDAV::isJSON($type)))
|
|
{
|
|
$event = Api\CalDAV\JsCalendar::parseJsEvent($options['content'], $oldEvent ?? [], $type, $method, $user);
|
|
$cal_id = $this->bo->save($event);
|
|
}
|
|
else
|
|
{
|
|
$cal_id = $handler->importVCal($vCalendar, $eventId,
|
|
self::etag2value($this->http_if_match), false, 0, $this->caldav->current_user_principal, $user, $charset, $id);
|
|
}
|
|
|
|
|
|
if (!$cal_id)
|
|
{
|
|
if ($this->debug) error_log(__METHOD__."(,$id) eventId=$eventId: importVCal('$options[content]') returned ".array2string($cal_id));
|
|
if ($eventId && $cal_id === false)
|
|
{
|
|
// ignore import failures
|
|
$cal_id = $eventId;
|
|
$retval = true;
|
|
}
|
|
elseif ($cal_id === 0) // etag failure
|
|
{
|
|
// honor Prefer: return=representation for 412 too (no need for client to explicitly reload)
|
|
$this->check_return_representation($options, $id, $user);
|
|
return '412 Precondition Failed';
|
|
}
|
|
else
|
|
{
|
|
return '403 Forbidden';
|
|
}
|
|
}
|
|
|
|
// send evtl. necessary respose headers: Location, etag, ...
|
|
$this->put_response_headers($cal_id, $options['path'], $retval, self::$path_attr == 'caldav_name');
|
|
|
|
return $retval;
|
|
}
|
|
|
|
/**
|
|
* Handle post request for a schedule entry
|
|
*
|
|
* @param array &$options
|
|
* @param int $id
|
|
* @param int $user =null account_id of owner, default null
|
|
* @return mixed boolean true on success, false on failure or string with http status (eg. '404 Not Found')
|
|
*/
|
|
function post(&$options,$id,$user=null)
|
|
{
|
|
if ($this->debug) error_log(__METHOD__."($id, $user)".print_r($options,true));
|
|
|
|
$vCalendar = htmlspecialchars_decode($options['content']);
|
|
$charset = null;
|
|
if (!empty($options['content_type']))
|
|
{
|
|
$content_type = explode(';', $options['content_type']);
|
|
if (count($content_type) > 1)
|
|
{
|
|
array_shift($content_type);
|
|
foreach ($content_type as $attribute)
|
|
{
|
|
list($key, $value) = explode('=', $attribute);
|
|
switch (strtolower(trim($key)))
|
|
{
|
|
case 'charset':
|
|
$charset = strtoupper(trim($value));
|
|
}
|
|
}
|
|
}
|
|
}
|
|
|
|
if (substr($options['path'],-8) == '/outbox/')
|
|
{
|
|
if (preg_match('/^METHOD:REQUEST(\r\n|\r|\n)(.*)^BEGIN:VFREEBUSY/ism', $vCalendar))
|
|
{
|
|
if ($user != $GLOBALS['egw_info']['user']['account_id'])
|
|
{
|
|
error_log(__METHOD__."() freebusy request only allowed to own outbox!");
|
|
return '403 Forbidden';
|
|
}
|
|
// do freebusy request
|
|
return $this->outbox_freebusy_request($vCalendar, $charset, $user, $options);
|
|
}
|
|
else
|
|
{
|
|
// POST to deliver an invitation, containing http headers:
|
|
// Originator: mailto:<organizer-email>
|
|
// Recipient: mailto:<attendee-email>
|
|
// --> currently we simply ignore these posts, as EGroupware does it's own notifications based on user preferences
|
|
return '204 No Content';
|
|
}
|
|
}
|
|
if (preg_match('/^METHOD:(PUBLISH|REQUEST)(\r\n|\r|\n)(.*)^BEGIN:VEVENT/ism', $options['content']))
|
|
{
|
|
$handler = $this->_get_handler();
|
|
if (($foundEvents = $handler->iCalSearch($vCalendar, null, false, $charset)))
|
|
{
|
|
$id = array_shift($foundEvents);
|
|
list($eventId) = explode(':', $id);
|
|
|
|
if (!($cal_id = $handler->importVCal($vCalendar, $eventId, null,
|
|
false, 0, $this->caldav->current_user_principal, $user, $charset)))
|
|
{
|
|
if ($this->debug) error_log(__METHOD__."() importVCal($eventId) returned false");
|
|
}
|
|
header('ETag: "'.$this->get_etag($eventId).'"');
|
|
}
|
|
}
|
|
return true;
|
|
}
|
|
|
|
/**
|
|
* Handle outbox freebusy request
|
|
*
|
|
* @param string $ical
|
|
* @param string $charset of ical
|
|
* @param int $user account_id of owner
|
|
* @param array &$options
|
|
* @return mixed boolean true on success, false on failure or string with http status (eg. '404 Not Found')
|
|
*/
|
|
protected function outbox_freebusy_request($ical, $charset, $user, array &$options)
|
|
{
|
|
unset($options); // not used, but required by function signature
|
|
|
|
$vcal = new Horde_Icalendar();
|
|
if (!$vcal->parsevCalendar($ical, 'VCALENDAR', $charset))
|
|
{
|
|
return '400 Bad request';
|
|
}
|
|
$version = $vcal->getAttribute('VERSION');
|
|
|
|
//echo $ical."\n";
|
|
|
|
$handler = $this->_get_handler();
|
|
$handler->setSupportedFields('groupdav');
|
|
$handler->calendarOwner = $handler->user = 0; // to NOT default owner/organizer to something
|
|
if (!($component = $vcal->getComponent(0)) ||
|
|
!($event = $handler->vevent2egw($component, $version, $handler->supportedFields, $this->caldav->current_user_principal, 'Horde_Icalendar_Vfreebusy')))
|
|
{
|
|
return '400 Bad request';
|
|
}
|
|
if ($event['owner'] != $user)
|
|
{
|
|
$this->caldav->log(__METHOD__."('$ical',,$user) ORGANIZER is NOT principal!");
|
|
return '403 Forbidden';
|
|
}
|
|
//print_r($event);
|
|
$organizer = $component->getAttribute('ORGANIZER');
|
|
$attendees = (array)$component->getAttribute('ATTENDEE');
|
|
// X-CALENDARSERVER-MASK-UID specifies to exclude given event from busy-time
|
|
$mask_uid = $component->getAttributeDefault('X-CALENDARSERVER-MASK-UID', null);
|
|
|
|
header('Content-type: text/xml; charset=UTF-8');
|
|
|
|
$xml = new XMLWriter;
|
|
$xml->openMemory();
|
|
$xml->setIndent(true);
|
|
$xml->startDocument('1.0', 'UTF-8');
|
|
$xml->startElementNs('C', 'schedule-response', Api\CalDAV::CALDAV);
|
|
|
|
foreach(array_keys($event['participants'] ?? []) as $uid)
|
|
{
|
|
$xml->startElementNs('C', 'response', null);
|
|
|
|
$xml->startElementNs('C', 'recipient', null);
|
|
$xml->writeElementNs('D', 'href', 'DAV:', $attendee=array_shift($attendees));
|
|
$xml->endElement(); // recipient
|
|
|
|
$xml->writeElementNs('C', 'request-status', null, '2.0;Success');
|
|
$xml->writeElementNs('C', 'calendar-data', null,
|
|
$handler->freebusy($uid, $event['end'], true, 'utf-8', $event['start'], 'REPLY', array(
|
|
'UID' => $event['uid'],
|
|
'ORGANIZER' => $organizer,
|
|
'ATTENDEE' => $attendee,
|
|
)+(empty($mask_uid) || !is_string($mask_uid) ? array() : array(
|
|
'X-CALENDARSERVER-MASK-UID' => $mask_uid,
|
|
))));
|
|
|
|
$xml->endElement(); // response
|
|
}
|
|
$xml->endElement(); // schedule-response
|
|
$xml->endDocument();
|
|
echo $xml->outputMemory();
|
|
|
|
return true;
|
|
}
|
|
|
|
/**
|
|
* Handle free-busy-query report
|
|
*
|
|
* @param string $path
|
|
* @param array $options
|
|
* @param int $user account_id
|
|
* @return mixed boolean true on success, false on failure or string with http status (eg. '404 Not Found')
|
|
*/
|
|
function free_busy_report($path,$options,$user)
|
|
{
|
|
unset($path); // unused, but required by function signature
|
|
if (!$this->bo->check_perms(calendar_bo::ACL_FREEBUSY, 0, $user))
|
|
{
|
|
return '403 Forbidden';
|
|
}
|
|
foreach($options['other'] as $filter)
|
|
{
|
|
if ($filter['name'] == 'time-range')
|
|
{
|
|
$start = $this->vCalendar->_parseDateTime($filter['attrs']['start']);
|
|
$end = $this->vCalendar->_parseDateTime($filter['attrs']['end']);
|
|
}
|
|
}
|
|
$handler = $this->_get_handler();
|
|
header('Content-Type: text/calendar');
|
|
echo $handler->freebusy($user, $end, true, 'utf-8', $start, 'REPLY', array());
|
|
|
|
exit(); // otherwise we get a 207 multistatus, not 200 Ok
|
|
}
|
|
|
|
/**
|
|
* Return priviledges for current user, default is read and read-current-user-privilege-set
|
|
*
|
|
* Reimplemented to add read-free-busy and schedule-deliver privilege
|
|
*
|
|
* @param string $path path of collection
|
|
* @param int $user =null owner of the collection, default current user
|
|
* @return array with privileges
|
|
*/
|
|
public function current_user_privileges($path, $user=null)
|
|
{
|
|
$privileges = parent::current_user_privileges($path, $user);
|
|
//error_log(__METHOD__."('$path', $user) parent gave ".array2string($privileges));
|
|
|
|
if ($this->bo->check_perms(calendar_bo::ACL_FREEBUSY, 0, $user))
|
|
{
|
|
$privileges['read-free-busy'] = Api\CalDAV::mkprop(Api\CalDAV::CALDAV, 'read-free-busy', '');
|
|
|
|
if (substr($path, -8) == '/outbox/' && $this->bo->check_acl_invite($user))
|
|
{
|
|
$privileges['schedule-send'] = Api\CalDAV::mkprop(Api\CalDAV::CALDAV, 'schedule-send', '');
|
|
}
|
|
}
|
|
if (substr($path, -7) == '/inbox/' && $this->bo->check_acl_invite($user))
|
|
{
|
|
$privileges['schedule-deliver'] = Api\CalDAV::mkprop(Api\CalDAV::CALDAV, 'schedule-deliver', '');
|
|
}
|
|
// remove bind privilege on other users or groups calendars, if calendar Api\Config require_acl_invite is set
|
|
// and current user has no invite grant
|
|
if ($user && $user != $GLOBALS['egw_info']['user']['account_id'] && isset($privileges['bind']) &&
|
|
!$this->bo->check_acl_invite($user))
|
|
{
|
|
unset($privileges['bind']);
|
|
}
|
|
//error_log(__METHOD__."('$path', $user) returning ".array2string($privileges));
|
|
return $privileges;
|
|
}
|
|
|
|
/**
|
|
* Fix event series with exceptions, called by calendar_ical::importVCal():
|
|
* a) only series master = first event got cal_id from URL
|
|
* b) exceptions need to be checked if they are already in DB or new
|
|
* c) recurrence-id of (real not virtual) exceptions need to be re-added to master
|
|
*
|
|
* @param array &$events
|
|
*/
|
|
static function fix_series(array &$events)
|
|
{
|
|
$bo = new calendar_boupdate();
|
|
|
|
// get array with orginal recurrences indexed by recurrence-id
|
|
$org_recurrences = $exceptions = array();
|
|
foreach(self::get_series($events[0]['uid'],$bo) as $k => $event)
|
|
{
|
|
if (!$k) $master = $event;
|
|
if ($event['recurrence'])
|
|
{
|
|
$org_recurrences[$event['recurrence']] = $event;
|
|
}
|
|
}
|
|
|
|
// assign cal_id's to already existing recurrences and evtl. re-add recur_exception to master
|
|
foreach($events as $k => &$recurrence)
|
|
{
|
|
if (!$recurrence['recurrence'])
|
|
{
|
|
// master
|
|
$recurrence['id'] = $master['id'];
|
|
$master =& $events[$k];
|
|
continue;
|
|
}
|
|
|
|
// from now on we deal with exceptions
|
|
$org_recurrence = isset($recurrence['recurrence']) ? $org_recurrences[$recurrence['recurrence']] : null;
|
|
if (isset($org_recurrence)) // already existing recurrence
|
|
{
|
|
//error_log(__METHOD__.'() setting id #'.$org_recurrence['id']).' for '.$recurrence['recurrence'].' = '.date('Y-m-d H:i:s',$recurrence['recurrence']);
|
|
$recurrence['id'] = $org_recurrence['id'];
|
|
|
|
// re-add (non-virtual) exceptions to master's recur_exception
|
|
if ($recurrence['id'] != $master['id'])
|
|
{
|
|
//error_log(__METHOD__.'() re-adding recur_exception '.$recurrence['recurrence'].' = '.date('Y-m-d H:i:s',$recurrence['recurrence']));
|
|
$exceptions[] = $recurrence['recurrence'];
|
|
}
|
|
// remove recurrence to be able to detect deleted exceptions
|
|
unset($org_recurrences[$recurrence['recurrence']]);
|
|
}
|
|
}
|
|
$master['recur_exception'] = array_merge($exceptions, $master['recur_exception']);
|
|
|
|
// delete not longer existing recurrences
|
|
foreach($org_recurrences as $org_recurrence)
|
|
{
|
|
if ($org_recurrence['id'] != $master['id']) // non-virtual recurrence
|
|
{
|
|
//error_log(__METHOD__.'() deleting #'.$org_recurrence['id']);
|
|
$bo->delete($org_recurrence['id']); // might fail because of permissions
|
|
}
|
|
else // virtual recurrence
|
|
{
|
|
//error_log(__METHOD__.'() delete virtual exception '.$org_recurrence['recurrence'].' = '.date('Y-m-d H:i:s',$org_recurrence['recurrence']));
|
|
$bo->update_status($master, $org_recurrence, $org_recurrence['recurrence']);
|
|
}
|
|
}
|
|
//foreach($events as $n => $event) error_log(__METHOD__." $n after: ".array2string($event));
|
|
}
|
|
|
|
/**
|
|
* Handle delete request for an event
|
|
*
|
|
* If current user has no right to delete the event, but is an attendee, we reject the event for him.
|
|
*
|
|
* @todo remove (non-virtual) exceptions, if series master gets deleted
|
|
* @param array &$options
|
|
* @param int $id
|
|
* @param int $user account_id of collection owner
|
|
* @return mixed boolean true on success, false on failure or string with http status (eg. '404 Not Found')
|
|
*/
|
|
function delete(&$options,$id,$user)
|
|
{
|
|
if (strpos($options['path'], '/inbox/') !== false)
|
|
{
|
|
return true; // simply ignore DELETE in inbox for now
|
|
}
|
|
$return_no_access = true; // to allow to check if current use is a participant and reject the event for him
|
|
$event = $this->_common_get_put_delete('DELETE',$options,$id,$return_no_access);
|
|
|
|
/* user has delete-rights, check if we have an external organizer and more participants
|
|
if ($event && $return_no_access && count($event['participants']) > 2)
|
|
{
|
|
foreach($event['participants'] as $uid => $status)
|
|
{
|
|
$quantity = $role = null;
|
|
calendar_so::split_status($status, $quantity, $role);
|
|
if (!is_numeric($uid) && $role == 'CHAIR') break;
|
|
}
|
|
if (!(!is_numeric($uid) && $role == 'CHAIR'))
|
|
{
|
|
$return_no_access = false; // only set status rejected, but do NOT delete the event
|
|
}
|
|
}*/
|
|
|
|
// no event found --> 404 Not Found
|
|
if (!is_array($event))
|
|
{
|
|
$ret = $event;
|
|
error_log("_common_get_put_delete('DELETE', ..., $id) user=$user, return_no_access=".array2string($return_no_access)." returned ".array2string($event));
|
|
}
|
|
// Work around problems with Outlook CalDAV Synchronizer (https://caldavsynchronizer.org/)
|
|
// - sends a DELETE to reject a meeting request --> deletes event for all participants, if user has delete rights from the organizer
|
|
// --> only set status for everyone else but the organizer
|
|
// OR no delete rights and deleting an event in someone else calendar --> check if calendar owner is a participant --> reject him
|
|
elseif ((!$return_no_access || (self::get_agent() === 'caldavsynchronizer' && $event['owner'] != $user)) &&
|
|
// check if current user has edit rights for calendar of $user, can change status / reject invitation for him
|
|
$this->bo->check_perms(Acl::EDIT, 0, $user))
|
|
{
|
|
// check if user is a participant or one of the groups he is a member of --> reject the meeting request
|
|
$ret = '403 Forbidden';
|
|
$memberships = $GLOBALS['egw']->accounts->memberships($user, true);
|
|
foreach(array_keys($event['participants']) as $uid)
|
|
{
|
|
if ($user == $uid || in_array($uid, $memberships))
|
|
{
|
|
$this->bo->set_status($event, $user, 'R');
|
|
$ret = true;
|
|
break;
|
|
}
|
|
}
|
|
}
|
|
// current user has no delete rights for event --> reject invitation, if he is a participant
|
|
elseif (!$return_no_access)
|
|
{
|
|
// check if current user is a participant or one of the groups he is a member of --> reject the meeting request
|
|
$ret = '403 Forbidden';
|
|
$memberships = $GLOBALS['egw']->accounts->memberships($this->bo->user, true);
|
|
foreach(array_keys($event['participants']) as $uid)
|
|
{
|
|
if ($this->bo->user == $uid || in_array($uid, $memberships))
|
|
{
|
|
$this->bo->set_status($event, $this->bo->user, 'R');
|
|
$ret = true;
|
|
break;
|
|
}
|
|
}
|
|
}
|
|
// we have delete rights on the event and (try to) delete it
|
|
else
|
|
{
|
|
$ret = $this->bo->delete($event['id']);
|
|
if (!$ret) { error_log("delete($event[id]) returned FALSE"); $ret = '400 Failed to delete event';}
|
|
}
|
|
if ($this->debug) error_log(__METHOD__."(,$id) return_no_access=$return_no_access, event[participants]=".array2string(is_array($event)?$event['participants']:null).", user={$this->bo->user} --> return ".array2string($ret));
|
|
return $ret;
|
|
}
|
|
|
|
/**
|
|
* Read an entry
|
|
*
|
|
* We have to make sure to not return or even consider in read deleted events, as the might have
|
|
* the same UID and/or caldav_name as not deleted events and would block access to valid entries
|
|
*
|
|
* @param string|id $id
|
|
* @return array|boolean array with entry, false if no read rights or deleted, null if $id does not exist
|
|
*/
|
|
function read($id)
|
|
{
|
|
if (strpos($column=self::$path_attr,'_') === false) $column = 'cal_'.$column;
|
|
|
|
$event = $this->bo->read(array($column => $id, 'cal_reference=0'), null, true,
|
|
$date_format = Api\CalDAV::isJSON() ? 'object' : 'server');
|
|
|
|
// read with array as 1. param, returns an array of events!
|
|
// as we no longer return only NOT-deleted events, there might be more
|
|
if ($event)
|
|
{
|
|
foreach ($event as $event)
|
|
{
|
|
if (empty($event['cal_deleted'])) break;
|
|
}
|
|
// the above prefers a NOT deleted event over deleted noes, thought all might be deleted
|
|
if (!empty($event['cal_deleted']))
|
|
{
|
|
$retval = false;
|
|
if ($this->debug > 0) error_log(__METHOD__."($id) event has been deleted returning ".array2string($retval));
|
|
return $retval;
|
|
}
|
|
}
|
|
|
|
if (!($retval = $this->bo->check_perms(calendar_bo::ACL_FREEBUSY,$event, 0, 'server')) &&
|
|
// above can be true, if current user is not in master but just a recurrence
|
|
(!$event['recur_type'] || !($events = self::get_series($event['uid'], $this->bo, false, null, null, $date_format))))
|
|
{
|
|
if ($this->debug > 0) error_log(__METHOD__."($id) no READ or FREEBUSY rights returning ".array2string($retval));
|
|
return $retval;
|
|
}
|
|
if (!$this->bo->check_perms(Acl::READ, $event, 0, 'server'))
|
|
{
|
|
$this->bo->clear_private_infos($event, array($this->bo->user, $event['owner']));
|
|
}
|
|
// handle deleted events, as not existing
|
|
if ($event['deleted']) $event = null;
|
|
|
|
if ($this->debug > 1) error_log(__METHOD__."($id) returning ".array2string($event));
|
|
|
|
return $event;
|
|
}
|
|
|
|
/**
|
|
* Update etag, ctag and sync-token to reflect changed attachments
|
|
*
|
|
* @param array|string|int $entry array with entry data from read, or id
|
|
*/
|
|
public function update_tags($entry)
|
|
{
|
|
if (!is_array($entry)) $entry = $this->read($entry);
|
|
|
|
$this->bo->update($entry, true);
|
|
}
|
|
|
|
/**
|
|
* Query ctag for calendar
|
|
*
|
|
* @return string
|
|
*/
|
|
public function getctag($path,$user)
|
|
{
|
|
$ctag = $this->bo->get_ctag($user,$path == '/calendar/' ? 'owner' : 'default'); // default = not rejected
|
|
|
|
if ($this->debug > 1) error_log(__FILE__.'['.__LINE__.'] '.__METHOD__. "($path)[$user] = $ctag");
|
|
|
|
return $ctag;
|
|
}
|
|
|
|
/**
|
|
* Get the etag for an entry
|
|
*
|
|
* @param array|int $entry array with event or cal_id
|
|
* @param string $schedule_tag =null on return schedule-tag
|
|
* @return string|boolean string with etag or false
|
|
*/
|
|
function get_etag($entry, &$schedule_tag=null)
|
|
{
|
|
$etag = $this->bo->get_etag($entry, $schedule_tag, $this->client_shared_uid_exceptions);
|
|
|
|
//error_log(__METHOD__ . "($entry[id] ($entry[etag]): $entry[title] --> etag=$etag");
|
|
return $etag;
|
|
}
|
|
|
|
/**
|
|
* Send response-headers for a PUT (or POST with add-member query parameter)
|
|
*
|
|
* Reimplemented to send
|
|
*
|
|
* @param int|array $entry id or array of new created entry
|
|
* @param string $path
|
|
* @param int|string $retval
|
|
* @param boolean $path_attr_is_name =true true: path_attr is ca(l|rd)dav_name, false: id (GroupDAV needs Location header)
|
|
* @param string $etag =null etag, to not calculate it again (if != null)
|
|
* @param string $prefix =''
|
|
*/
|
|
function put_response_headers($entry, $path, $retval, $path_attr_is_name=true, $etag=null, $prefix='')
|
|
{
|
|
$schedule_tag = null;
|
|
if (!isset($etag)) $etag = $this->get_etag($entry, $schedule_tag);
|
|
|
|
if ($this->use_schedule_tag)
|
|
{
|
|
header('Schedule-Tag: "'.$schedule_tag.'"');
|
|
}
|
|
parent::put_response_headers($entry, $path, $retval, $path_attr_is_name, $etag, $prefix);
|
|
}
|
|
|
|
/**
|
|
* Check if user has the neccessary rights on an event
|
|
*
|
|
* @param int $acl Acl::READ, Acl::EDIT or Acl::DELETE
|
|
* @param array|int $event event-array or id
|
|
* @return boolean null if entry does not exist, false if no access, true if access permitted
|
|
*/
|
|
function check_access($acl,$event)
|
|
{
|
|
if ($acl == Acl::READ)
|
|
{
|
|
// we need at least calendar_bo::ACL_FREEBUSY to get some information
|
|
$acl = calendar_bo::ACL_FREEBUSY;
|
|
}
|
|
return $this->bo->check_perms($acl,$event,0,'server');
|
|
}
|
|
|
|
/**
|
|
* Add extra properties for calendar collections
|
|
*
|
|
* @param array $props regular props by the Api\CalDAV handler
|
|
* @param string $displayname
|
|
* @param string $base_uri =null base url of handler
|
|
* @param int $user =null account_id of owner of current collection
|
|
* @param string $path =null path of the collection
|
|
* @return array
|
|
*/
|
|
public function extra_properties(array $props, $displayname, $base_uri=null, $user=null, $path=null)
|
|
{
|
|
unset($base_uri); // unused, but required by function signature
|
|
if (!isset($props['calendar-description']))
|
|
{
|
|
// default calendar description: can be overwritten via PROPPATCH, in which case it's already set
|
|
$props['calendar-description'] = Api\CalDAV::mkprop(Api\CalDAV::CALDAV,'calendar-description',$displayname);
|
|
}
|
|
$supported_components = array(
|
|
Api\CalDAV::mkprop(Api\CalDAV::CALDAV,'comp',array('name' => 'VEVENT')),
|
|
);
|
|
// outbox supports VFREEBUSY too, it is required from OS X iCal to autocomplete locations
|
|
if (substr($path,-8) == '/outbox/')
|
|
{
|
|
$supported_components[] = Api\CalDAV::mkprop(Api\CalDAV::CALDAV,'comp',array('name' => 'VFREEBUSY'));
|
|
}
|
|
$props['supported-calendar-component-set'] = Api\CalDAV::mkprop(Api\CalDAV::CALDAV,
|
|
'supported-calendar-component-set',$supported_components);
|
|
// supported reports
|
|
$props['supported-report-set'] = array(
|
|
'calendar-query' => Api\CalDAV::mkprop('supported-report',array(
|
|
Api\CalDAV::mkprop('report',array(
|
|
Api\CalDAV::mkprop(Api\CalDAV::CALDAV,'calendar-query',''))))),
|
|
'calendar-multiget' => Api\CalDAV::mkprop('supported-report',array(
|
|
Api\CalDAV::mkprop('report',array(
|
|
Api\CalDAV::mkprop(Api\CalDAV::CALDAV,'calendar-multiget',''))))),
|
|
'free-busy-query' => Api\CalDAV::mkprop('supported-report',array(
|
|
Api\CalDAV::mkprop('report',array(
|
|
Api\CalDAV::mkprop(Api\CalDAV::CALDAV,'free-busy-query',''))))),
|
|
);
|
|
// rfc 6578 sync-collection report for everything but outbox
|
|
// only if "delete-prevention" is switched on (deleted entries get marked deleted but not actualy deleted
|
|
if (strpos($path, '/outbox/') === false)
|
|
{
|
|
$props['supported-report-set']['sync-collection'] = Api\CalDAV::mkprop('supported-report',array(
|
|
Api\CalDAV::mkprop('report',array(
|
|
Api\CalDAV::mkprop('sync-collection','')))));
|
|
}
|
|
$props['supported-calendar-data'] = Api\CalDAV::mkprop(Api\CalDAV::CALDAV,'supported-calendar-data',array(
|
|
Api\CalDAV::mkprop(Api\CalDAV::CALDAV,'calendar-data', array('content-type' => 'text/calendar', 'version'=> '2.0')),
|
|
Api\CalDAV::mkprop(Api\CalDAV::CALDAV,'calendar-data', array('content-type' => 'text/x-calendar', 'version'=> '1.0'))));
|
|
|
|
// get timezone of calendar
|
|
if ($this->caldav->prop_requested('calendar-timezone'))
|
|
{
|
|
$props['calendar-timezone'] = Api\CalDAV::mkprop(Api\CalDAV::CALDAV,'calendar-timezone',
|
|
calendar_timezones::user_timezone($user));
|
|
}
|
|
return $props;
|
|
}
|
|
|
|
/**
|
|
* Get the handler and set the supported fields
|
|
*
|
|
* @return calendar_ical
|
|
*/
|
|
private function _get_handler()
|
|
{
|
|
$handler = new calendar_ical();
|
|
$handler->setSupportedFields('GroupDAV',$this->agent);
|
|
$handler->supportedFields['attachments'] = true; // enabling attachments
|
|
if ($this->debug > 1) error_log("ical Handler called: " . $this->agent);
|
|
return $handler;
|
|
}
|
|
|
|
/**
|
|
* Return calendars/addressbooks shared from other users with the current one
|
|
*
|
|
* return array account_id => account_lid pairs
|
|
*/
|
|
function get_shared()
|
|
{
|
|
$shared = array();
|
|
$pref = $GLOBALS['egw_info']['user']['preferences']['groupdav']['calendar-home-set'];
|
|
$calendar_home_set = $pref ? explode(',', $pref) : array();
|
|
// replace symbolic id's with real nummeric id's
|
|
foreach(array(
|
|
'G' => $GLOBALS['egw_info']['user']['account_primary_group'],
|
|
) as $sym => $id)
|
|
{
|
|
if (($key = array_search($sym, $calendar_home_set)) !== false)
|
|
{
|
|
$calendar_home_set[$key] = $id;
|
|
}
|
|
}
|
|
foreach(ExecMethod('calendar.calendar_bo.list_cals') as $entry)
|
|
{
|
|
$id = $entry['grantor'];
|
|
if ($id && $GLOBALS['egw_info']['user']['account_id'] != $id && // no current user
|
|
(in_array('A',$calendar_home_set) || in_array((string)$id,$calendar_home_set)) &&
|
|
is_numeric($id) && ($owner = $this->accounts->id2name($id)))
|
|
{
|
|
$shared[$id] = 'calendar-'.$owner;
|
|
}
|
|
}
|
|
// shared locations and resources
|
|
if ($GLOBALS['egw_info']['user']['apps']['resources'])
|
|
{
|
|
foreach(array('locations','resources') as $res)
|
|
{
|
|
if (($pref = $GLOBALS['egw_info']['user']['preferences']['groupdav']['calendar-home-set-'.$res]))
|
|
{
|
|
foreach(explode(',', $pref) as $res_id)
|
|
{
|
|
$is_location = $res == 'locations';
|
|
$shared['r'.$res_id] = str_replace('s/', '-', Api\CalDAV\Principals::resource2name($res_id, $is_location));
|
|
}
|
|
}
|
|
}
|
|
}
|
|
return $shared;
|
|
}
|
|
|
|
/**
|
|
* Return appliction specific settings
|
|
*
|
|
* @param array $hook_data
|
|
* @return array of array with settings
|
|
*/
|
|
static function get_settings($hook_data)
|
|
{
|
|
$calendars = array(
|
|
'A' => lang('All'),
|
|
'G' => lang('Primary Group'),
|
|
);
|
|
if (!isset($hook_data['setup']) && in_array($hook_data['type'], array('user', 'group')))
|
|
{
|
|
$user = $hook_data['account_id'];
|
|
foreach (calendar_bo::list_calendars($user) as $entry)
|
|
{
|
|
$calendars[$entry['grantor']] = $entry['name'];
|
|
}
|
|
if ($user > 0) unset($calendars[$user]); // skip current user
|
|
}
|
|
|
|
$settings = array();
|
|
$settings['calendar-home-set'] = array(
|
|
'type' => 'multiselect',
|
|
'label' => 'Calendars to sync in addition to personal calendar',
|
|
'name' => 'calendar-home-set',
|
|
'help' => lang('Only supported by a few fully conformant clients (eg. from Apple). If you have to enter a URL, it will most likly not be suppored!').'<br/>'.lang('They will be sub-folders in users home (%1 attribute).','CalDAV "calendar-home-set"'),
|
|
'values' => $calendars,
|
|
'xmlrpc' => True,
|
|
'admin' => False,
|
|
);
|
|
$settings['calendar-past-limit'] = array(
|
|
'type' => 'integer',
|
|
'label' => lang('How many days to sync in the past (default %1)', self::PAST_LIMIT),
|
|
'name' => 'calendar-past-limit',
|
|
'help' => 'Clients not explicitly stating a limit get limited to these many days. A too high limit may cause problems with some clients.',
|
|
'xmlrpc' => True,
|
|
'admin' => False,
|
|
);
|
|
$settings['calendar-future-limit'] = array(
|
|
'type' => 'integer',
|
|
'label' => lang('How many days to sync in the future (default %1)', self::FUTURE_LIMIT),
|
|
'name' => 'calendar-future-limit',
|
|
'help' => 'Clients not explicitly stating a limit get limited to these many days. A too high limit may cause problems with some clients.',
|
|
'xmlrpc' => True,
|
|
'admin' => False,
|
|
);
|
|
|
|
// allow to subscribe to resources
|
|
if ($GLOBALS['egw_info']['user']['apps']['resources'] && ($all_resources = Api\CalDAV\Principals::get_resources()))
|
|
{
|
|
$resources = $locations = array();
|
|
foreach($all_resources as $resource)
|
|
{
|
|
if (Api\CalDAV\Principals::resource_is_location($resource))
|
|
{
|
|
$locations[$resource['res_id']] = $resource['name'];
|
|
}
|
|
else
|
|
{
|
|
$resources[$resource['res_id']] = $resource['name'];
|
|
}
|
|
}
|
|
foreach(array(
|
|
'locations' => $locations,
|
|
'resources' => $resources,
|
|
) as $name => $options)
|
|
{
|
|
if ($options)
|
|
{
|
|
natcasesort($options);
|
|
$settings['calendar-home-set-'.$name] = array(
|
|
'type' => 'multiselect',
|
|
'label' => lang('%1 to sync', lang($name == 'locations' ? 'Location calendars' : 'Resource calendars')),
|
|
'no_lang'=> true,
|
|
'name' => 'calendar-home-set-'.$name,
|
|
'help' => lang('Only supported by a few fully conformant clients (eg. from Apple). If you have to enter a URL, it will most likly not be suppored!').'<br/>'.lang('They will be sub-folders in users home (%1 attribute).','CalDAV "calendar-home-set"'),
|
|
'values' => $options,
|
|
'xmlrpc' => True,
|
|
'admin' => False,
|
|
);
|
|
}
|
|
}
|
|
}
|
|
return $settings;
|
|
}
|
|
} |