On Thu, Oct 30, 2008 at 4:24 PM, John Lockwood <[EMAIL PROTECTED]> wrote: > It was my understanding that gaining an authenticated feed to a calendar > required authentication from the calendar owner account, but I seem to be > authenticating from another account and gaining an authenticated feed. > Can you verify this security issue?
It depends on the calendar's sharing settings. You'll have access to a calendar if any of the following conditions are true: 1. You own the calendar. 2. The calendar has been explicitly shared with you. 3. The calendar has been marked as public. 4. You're using the calendar's magic-cookie URL (which is only given out to users who can modify the calendar's permissions). 5. You're the domain administrator in a Google Apps domain, and the user is one of the users in that domain. -- Trevor Johns --~--~---------~--~----~------------~-------~--~----~ You received this message because you are subscribed to the Google Groups "Google Calendar Data API" group. To post to this group, send email to [email protected] To unsubscribe from this group, send email to [EMAIL PROTECTED] For more options, visit this group at http://groups.google.com/group/google-calendar-help-dataapi?hl=en -~----------~----~----~----~------~----~------~--~---
