View Issue Details
|ID||Project||Category||View Status||Date Submitted||Last Update|
|0002714||SOGo Connector||with SOGo||public||2014-04-14 08:09||2014-04-29 14:18|
|Platform||[Client] Microsoft||OS||Windows||OS Version||7|
|Fixed in Version||24.0.5|
|Summary||0002714: Read-Only Shared Address Boooks - updates fail if user updates local copy|
This is serious.
If a User using Thunderbird (24.4) and SOGo Connector+Integrator has Read-Only permissions to a shared Address Book, and changes something for one of the contacts, SOGo constantly tries to update the Shared Address Book (clicking the Synchronize button says it has uploaded the change every time, but the change is NOT uploaded).
That in and of itself is not really serious (though the Sync should DELETE the local change and resync to the server version).
The serious part of this bug is, once that user has tried to update one of t he contacts in that Shared Address Book, that Contact will NO LONGER UPDATE AT ALL.
Changes made to the main Shared Address Book no longer propogate to that users local copy.
This does not affect other users who have access to the Shared Address Book (thankfully), but I guarantee this will cause lots of problems, because Users WILL try to edit these Address Books.
|Steps To Reproduce|
|Tags||No tags attached.|
Not sure I understand.
This is a serious bug.
I guarantee we will have LOTS of bug reports coming my way with Address Book Syncing failing because people try to update Contacts in these Address Books.
Are you saying you don't consider this a bug?
No, 5 is a bug, the rest is "normal''.
Ok, but what about 3?
SOGo should not claim that the Contact was updated when it wasn't, and it certainly shouldn't say it over and over again every time the user starts Thunderbird and/or clicks the Sync button.
It should say it failed, and why (user doesn't have the requisite permission to update it).
Yes about 3.
Ok, thanks... :)
Should I open a separate bug for each of these two bugs then? Or is this one good enough?
Also - do you think it will be easy enough to fix?
This bug is ok.
We'll look at it this week and advise.
Just wanted to add that I've noted the issue of read-only Thunderbird clients being able to edit their local copy of a book in 0001939.
I agree it would be nice if there was a way to stop read-only users from making changes, even local ones, if possible.
Sorry, but just to be clear...
This is not just a 'it would be nice' issue.
This is a serious bug that:
a) BREAKS the Shared Contacts Address Book, if only for the Contact(s) that was/were edited locally by the user,
b) Results in continuous and false 'Successful Sync' notifications for the local change that was made, and
c) can only be resolved by un/re-subscribing the Address Book
I really wouldn't be quite as concerned about preventing a user from being able to do this, if the next sync would simply undo the change, instead of what it does now - simply stops syncing that contact, but continually saying it is successfully syncing the users change.
Then it would be a 'it would be nice if the user was prevented from doing this in the first place and was actually notified by the system that they didn't have permission to edit those contacts'.
Ludovic: Why is cwright listed in his comment as 'reporter'? I reported this bug.
mbi, that's access level, not your relation to this bug
ludo... above you said:
"there's no ACL verification on the client side (ie. Thunderbird) for address books - only server-side enforcements."
But, in these Shared SOGo Address Books, there is a 'Read Only' checkbox in the bottom left that is greyed out and unchecked, except that in the global 'directory', it is CHECKED (but still greyed out).
What is this attribute for, why is it greyed out, and why is it checked for the 'directory'?
Also - what would happen if I try to edit a contact in the 'directory' list? Would it break that one as well? I don't want to test this at this point, but I'm wondering what would happen if a regular user tried this.
I wonder if the situation can be improved by showing a proper sync error.
Ludo? Any chance for a reply to my questions above?
Any movement on this?
It is becoming more and more of a problem.
I just had to un/re-sub both of our shared Address Books for 5 users (testing the pushed updates for the latest extension versions), because they keep adding new contacts to our Company Address Book even when they shouldn't be able to do this.
Adding Contacts to shared Address Books where user has read-only access also breaks the Address Book, but it breaks syncing for all contacts.
This makes this an even more serious bug than I thought.
A patch to handle the 403 should be available today or tomorrow.
Thanks for this!
But, I'm not sure what you mean by 'to handle the 403'...
Will this resolve the sync problems? And if so, how? Ie, does it just wipe the local copy and do a resync?
The bug was introduced when we merged this pull request:
That line is wrong:
It causes an exception to be raised.
Now, even with 403 results, the sync process still work and updates are pulled.
We'll modify the code so that we inform the user the upload has failed for one card (and give card details, if possible), but we won't delete it so that if ACLs are changed or fixed on the subscribed address books, changes will be pushed accordingly.
|2014-04-14 08:09||mbi||New Issue|
|2014-04-14 08:50||ludovic||Note Added: 0006891|
|2014-04-14 09:13||mbi||Note Added: 0006892|
|2014-04-14 09:14||ludovic||Note Added: 0006893|
|2014-04-14 09:18||mbi||Note Added: 0006894|
|2014-04-14 09:30||ludovic||Note Added: 0006895|
|2014-04-14 09:46||mbi||Note Added: 0006896|
|2014-04-14 09:51||ludovic||Note Added: 0006897|
|2014-04-16 10:12||cwright||Note Added: 0006902|
|2014-04-16 10:25||mbi||Note Added: 0006903|
|2014-04-17 01:43||altxt||Note Added: 0006912|
|2014-04-17 05:13||mbi||Note Added: 0006914|
|2014-04-17 05:19||mbi||Note Added: 0006916|
|2014-04-22 07:48||altxt||Note Added: 0006939|
|2014-04-22 09:32||mbi||Note Added: 0006941|
|2014-04-28 07:17||mbi||Note Added: 0006964|
|2014-04-28 07:19||mbi||Note Added: 0006965|
|2014-04-29 08:59||ludovic||Note Added: 0006969|
|2014-04-29 09:24||mbi||Note Added: 0006971|
|2014-04-29 10:47||ludovic||Note Added: 0006974|
|2014-04-29 14:18||ludovic||Note Added: 0006976|
|2014-04-29 14:18||ludovic||Status||new => closed|
|2014-04-29 14:18||ludovic||Assigned To||=> ludovic|
|2014-04-29 14:18||ludovic||Resolution||open => fixed|
|2014-04-29 14:18||ludovic||Fixed in Version||=> 24.0.5|