0005396: Calendar entry title visible, although only date and time are defined for public appointments. - SOGo | BTS

ID	Project	Category	View Status	Date Submitted	Last Update

0005396	SOGo	Backend Calendar	public	2021-09-27 12:01	2021-09-27 15:37

Reporter	danbet	Assigned To
Priority	normal	Severity	minor	Reproducibility	always
Status	closed	Resolution	no change required
Platform	Server	OS	Linux Debian 10 (Buster)	OS Version	10
Product Version	5.2.0

Summary	0005396: Calendar entry title visible, although only date and time are defined for public appointments.
Description	User A has configured a calendar in such a way that user B can only see the date and time of appointment entries. This for public and confidential appointments. Nobody is allowed to see private appointments. In the SOGo WebUI this now behaves correctly, but with other DAV clients (Thunderbird, Evolution, Android) user B sees the title of the appointment entries, not just the date and time. This problem occurs in 5.2.0, but it was there earlier. I don't know since which version. It was only after updating to 5.2.0 that I discovered that User A made this configuration.
Steps To Reproduce	User A configures user B to only see the date and time for public appointments. He records an appointment. User B sees the entered title in DAV clients, but not in SOGo WebUI.
Tags	No tags attached.

danbet 2021-09-27 12:02 reporter ~0015494	Perhaps it has to do that User B is Adminstrator?

francis 2021-09-27 12:31 administrator ~0015495	Does user B had viewing rights before user A changed the rights to date & time only? User B likely have the previous copy of user A's calendar; the user would need to unsubscribe and subscribe again to the calendar of user A.

danbet 2021-09-27 13:50 reporter ~0015496	No he did `nt. After the introduction of SOGo years ago, user B only saw the date and time, after a few months also the title. I assumed that user A has changed the permissions, but as I discovered today, it hasn't. As I said, when user B looks at the appointments in the SOGo WebUI, he only sees the date and time, but if he synchronizes with a DAV client, he sees everything. He can even open the appointment and edit / save it with Evolution. Changes cannot be made with Thunderbird, but the title and location are visible.

francis 2021-09-27 14:09 administrator ~0015497	If User B is a superuser, he can view and modify all calendars.

danbet 2021-09-27 14:38 reporter ~0015498	Yes, User B is a superuser. I understand that he can view an modify all calendars. But in the SOGo WebUI this is not the case.

francis 2021-09-27 14:42 administrator ~0015499	It's different in the Web interface since superusers have access to an additional module (Administration). A superuser should not be used as a normal user.

danbet 2021-09-27 14:46 reporter ~0015500	OK, thank you. You can close this ticket.

Date Modified	Username	Field	Change
2021-09-27 12:01	danbet	New Issue
2021-09-27 12:02	danbet	Note Added: 0015494
2021-09-27 12:31	francis	Note Added: 0015495
2021-09-27 13:50	danbet	Note Added: 0015496
2021-09-27 14:09	francis	Note Added: 0015497
2021-09-27 14:38	danbet	Note Added: 0015498
2021-09-27 14:42	francis	Note Added: 0015499
2021-09-27 14:46	danbet	Note Added: 0015500
2021-09-27 15:37	francis	Status	new => closed
2021-09-27 15:37	francis	Resolution	open => no change required