[pkg-horde] Bug#464058: turba access checking issue

Peter Paul Elfferich pp at dia.uva.nl
Thu Feb 7 22:32:21 UTC 2008


It's not so much the list's owner as the entry's owner, which could be
another shared address book, so that would turn into:
"This list contains X1 contacts from address book 'Y1' that you do not have
permission to view. Contact the owner (Z1) if you have questions." And so
forth for X2, Y2 and Z2 etc. Where X is the number of contacts, Y is the
name of the source address book and Z1 is the owner of the address book or
share.

Peter Paul

PS: I did another test with an interesting outcome by the way: if the
address added to a list is from a shared address book that another user can
not see/read, then it isn't shown, but it's not removed. So the silent
removal only seems to take place with addresses from private address books.

On Feb 7, 2008 6:38 PM, Chuck Hagenbuch <chuck at horde.org> wrote:

> Quoting Peter Paul Elfferich <pp at dia.uva.nl>:
>
> > That would perhaps be a simpler fix, but I think it will be confusing to
> > users.
> > If you really want to allow this cross-address-book adding then I'd
> suggest
> > showing warning messages detailing why a number of contacts could not be
> > displayed.
>
> That seems possible - "This list contains X contacts that you do not
> have permission to view. Contact the list's owner if you have
> questions." or something like that?
>
> -chuck
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.alioth.debian.org/pipermail/pkg-horde-hackers/attachments/20080207/e884ecec/attachment.htm 


More information about the pkg-horde-hackers mailing list