holm/egroupware
1
1
Fork 0
forked from extern/egroupware
Code Issues Pull Requests Packages Projects Releases Wiki Activity

0.9.34-ng-a5x set nonowner_import default disabled

Browse Source
This commit is contained in:
Jan v. Lieshout 2006-04-08 13:46:14 +00:00
parent 890237480b
commit 6c613255d4
1 changed files with 18 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

22
icalsrv.php
View File

@ -10,7 +10,7 @@
* @note <b> THIS IS STILL EXPERIMENTAL CODE </b> do not use in production. * @note <b> THIS IS STILL EXPERIMENTAL CODE </b> do not use in production.
* @note this script is supposed to be at: egw-root/icalsrv.php * @note this script is supposed to be at: egw-root/icalsrv.php
* *
* @version 0.9.34-ng-a4x first version with xmlrpc copied session handling * @version 0.9.34-ng-a5x first version with xmlrpc copied session handling
* @date 20060407 * @date 20060407
* @author Jan van Lieshout <jvl (at) xs4all.nl> Rewrite and extension for egw 1.2. * @author Jan van Lieshout <jvl (at) xs4all.nl> Rewrite and extension for egw 1.2.
* (see: @url http://www.egroupware.org ) * (see: @url http://www.egroupware.org )
@ -45,6 +45,11 @@ $logdir = false; // set to false for no logging
#$isdebug = True; #$isdebug = True;
$isdebug = False; $isdebug = False;
/** Disallow users to import in non owned calendars and infologs
* @var boolean $disable_nonowner_import
*/
$disable_nonowner_import = true;
// icalsrv variant with session setup modeled after xmlrpc.php // icalsrv variant with session setup modeled after xmlrpc.php
$GLOBALS['egw_info'] = array(); $GLOBALS['egw_info'] = array();
@ -142,8 +147,6 @@ if (!($icalsrv['session_ok'] && $icalsrv['authed'])) {
exit; exit;
} }
// no debug for rest needed atm
$isdebug =false;
// oke we have a session! // oke we have a session!
@ -412,7 +415,18 @@ $logmsg = "";
// oke now process the actual import or export to/from icalvc.. // oke now process the actual import or export to/from icalvc..
if ($_SERVER['REQUEST_METHOD'] == 'PUT') { if ($_SERVER['REQUEST_METHOD'] == 'PUT') {
// *** PUT Request so do an Import ************* // *** PUT Request so do an Import *************
if($isdebug)
error_log('icalsrv.php: importing, by user:' .$GLOBALS['egw_info']['user']['account_id']
. ' for virtual calendar of: ' . $reqvircal_owner_id);
// check if importing in not owned calendars is disabled
if($reqvircal_owner_id
&& ($GLOBALS['egw_info']['user']['account_id'] !== $reqvircal_owner_id)){
if($disable_nonowner_import){
error_log('icalsrv.php: importing in non owner calendars currently disabled');
fail_exit('importing in non owner calendars currently disabled', '403');
}
}
// I0 read the payload // I0 read the payload
$logmsg = 'IMPORTING in '. $importMode . ' mode'; $logmsg = 'IMPORTING in '. $importMode . ' mode';
$fpput = fopen("php://input", "r"); $fpput = fopen("php://input", "r");