holm/egroupware
1
1
Fork 0
forked from extern/egroupware
Code Issues Pull Requests Packages Projects Releases Wiki Activity

* CardDAV/Addressbook: do NOT allow to delete accounts via CardDAV, was never intended, but as it is allowed in addressbook, it was possible via CardDAV

Browse Source
This commit is contained in:
Ralf Becker 2013-01-22 13:19:07 +00:00
parent 0f76ff5ab5
commit 4f16b71ea5
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
addressbook/inc/class.addressbook_groupdav.inc.php
View File

@ -936,7 +936,7 @@ class addressbook_groupdav extends groupdav_handler
*/
function check_access($acl,$contact)
{
return $this->bo->check_perms($acl,$contact);
return $this->bo->check_perms($acl, $contact, true); // true = deny to delete accounts
}
/**