From 4f16b71ea5952d8bfba4a1a015a1fb51ca39da1c Mon Sep 17 00:00:00 2001 From: Ralf Becker Date: Tue, 22 Jan 2013 13:19:07 +0000 Subject: [PATCH] * CardDAV/Addressbook: do NOT allow to delete accounts via CardDAV, was never intended, but as it is allowed in addressbook, it was possible via CardDAV --- addressbook/inc/class.addressbook_groupdav.inc.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/addressbook/inc/class.addressbook_groupdav.inc.php b/addressbook/inc/class.addressbook_groupdav.inc.php index af565fbad4..1ece1a087b 100644 --- a/addressbook/inc/class.addressbook_groupdav.inc.php +++ b/addressbook/inc/class.addressbook_groupdav.inc.php @@ -936,7 +936,7 @@ class addressbook_groupdav extends groupdav_handler */ function check_access($acl,$contact) { - return $this->bo->check_perms($acl,$contact); + return $this->bo->check_perms($acl, $contact, true); // true = deny to delete accounts } /**