Re: [SOGo] caldav url

2011-11-16 Thread Luca Olivetti

Al 16/11/2011 16:03, En/na Federico Goldsztein ha escrit:


When I go to Calendar, right clic, Sharing... it still shows Any
Authenticated User.


Any authenticated user will be always there by default, but it doesn't 
mean he has any right on your calendar.

Double click Any authenticated user to see the rights.

Bye
--
Luca Olivetti
Wetron Automation Technology http://www.wetron.es
Tel. +34 935883004 (Ext.133)  Fax +34 935883007
--
users@sogo.nu
https://inverse.ca/sogo/lists


Re: [SOGo] caldav url

2011-11-16 Thread Georg Bretschneider
First of all, go into the sharing settings of one of your calendars,
maybe a newly created. Double click on authenticated users and then take
a look at the settings for private, confidential and public. If this is
always none your previous changes in your config worked. Could you
confirm this?

Try changing public to viewer, or whatever it is in the english
version of SOGo. Can you now add the calendar in lightning?


Bye



Am 16.11.2011 16:34, schrieb Federico Goldsztein:
 Yes, now when I add a network calendar in lightning with caldav it says
 The calendar name is momentarily not available, but now I cant the
 persons free/busy time.
 *Fede Goldsztein* | IT Support
 *Mail: *federico.goldszt...@teracode.com
 mailto:federico.goldszt...@teracode.com
 *Skype: *federico.goldsztein.teracode
 
 On 11/16/2011 12:18 PM, Luca Olivetti wrote:
 Al 16/11/2011 16:03, En/na Federico Goldsztein ha escrit:

 When I go to Calendar, right clic, Sharing... it still shows Any
 Authenticated User.

 Any authenticated user will be always there by default, but it
 doesn't mean he has any right on your calendar.
 Double click Any authenticated user to see the rights.

 Bye
-- 
users@sogo.nu
https://inverse.ca/sogo/lists


Re: [SOGo] caldav url

2011-11-15 Thread Didier Belhomme

Le 15/11/11 13:26, federico.goldszt...@teracode.com a écrit :

Hello, we are having a security issue, if I copy the calendar (caldav) url to
add in lightning all I need is to change the name to someone elses and i can
see their calendar.


Could it be possibly that your are Superuser for Sogo ? That could 
explain this behaviour :-)




How can I prevent this from happening?

Example: using this url
http://calendar.teracode.com/SOGo/dav/USERNAME/Calendar/personal as I'm already
validated I can use what ever username from the company I want.

What I need, of course, is to be able to onle see my own calendar.

Thanks.



--
Didier Belhomme
FUNDP - SIU
Gestionnaire Systemes Unix/GNU/Linux
E-mail: didier.belho...@fundp.ac.be
Tel : +32 81 72 50 25
Fax : +32 81 72 50 23
--
users@sogo.nu
https://inverse.ca/sogo/lists


Re: [SOGo] caldav url

2011-11-15 Thread Ludovic Marcotte

On 15/11/11 07:36, Federico Goldsztein wrote:
No, any LDAP user can do this. So far only us, the IT guys, are aware 
of it.
You likely set SOGoCalendarDefaultRoles to PublicViewer - and/or 
Viewer for other classes too.


--
Ludovic Marcotte
lmarco...@inverse.ca  ::  +1.514.755.3630  ::  www.inverse.ca
Inverse inc. :: Leaders behind SOGo (www.sogo.nu) and PacketFence 
(www.packetfence.org)

--
users@sogo.nu
https://inverse.ca/sogo/lists


Re: [SOGo] caldav url

2011-11-15 Thread Georg Bretschneider

 Ok, I'm sure this is what I need to change, but I can't seem to find the
 config file.

Hi,

have a look here:
/home/sogo/GNUstep/Defaults/.GNUstepDefaults

Otherwise try
find / -name \.GNUstepDefaults


Bye
Georg
-- 
users@sogo.nu
https://inverse.ca/sogo/lists


Re: [SOGo] caldav url

2011-11-15 Thread Georg Bretschneider


Am 15.11.2011 15:02, schrieb Federico Goldsztein:
 Yes, I have this
 
 keySOGoCalendarDefaultRoles/key
 array
 stringPublicViewer/string
 stringConfidentialDAndTViewer/string
 /array
 
 Should be like this i think, I still need the free/busy feature
 
 keySOGoCalendarDefaultRoles/key
 array
 string*Private*Viewer/string
 stringConfidentialDAndTViewer/string
 /array


PublicViewer means, public appointments are viewable per default. Your
change would make private appointments viewable per default for every
newly created calendar.

For a better understanding of these options log in SOGo and right click
on your personal calendar, choose user rights and double click on,
e.g., authorized users. There you'll see private, confidential and
public. The second part of the possible strings for
SOGoCalendarDefaultRoles can be found in the drop down menu.

Now make an appointment in your calendar. At the top of the newly opened
window chose Privacy, there you can choose whether it will be a
public, confidential or private appointment.

If I am correct, these options, like PublicViewer, define the
preferences for everyone, authorized users and the public, who want to
have access to the calendar. If that's so, I suggest to just delete the
whole key and tell every new user to set the preferences for authorized
users for their private and confidential appointments to DAndTViewer
on their own. And their public appointments to Viewer, too.


Bye
Georg








 
 Thanks
 *Fede Goldsztein* | IT Support
 *Mail: *federico.goldszt...@teracode.com
 mailto:federico.goldszt...@teracode.com
 *Skype: *federico.goldsztein.teracode
 
 On 11/15/2011 10:43 AM, Georg Bretschneider wrote:
 Ok, I'm sure this is what I need to change, but I can't seem to find the
 config file.
 Hi,

 have a look here:
 /home/sogo/GNUstep/Defaults/.GNUstepDefaults

 Otherwise try
 find / -name \.GNUstepDefaults


 Bye
 Georg
-- 
users@sogo.nu
https://inverse.ca/sogo/lists


Re: [SOGo] caldav url

2011-11-15 Thread Georg Bretschneider
 It's not about single appointments, what is happening is that if I right
 clic my calendar in sogo web  then clic sharing I already have Any
 Authenticated User by default, and I can't delete it. I want to set that
 to nothing by default for every user.

Yes, I know that. Just tried to show you the link between the options
for the key SOGoCalendarDefaultRoles and what you can see in the
webinterface.

You can not delete authorized users and public users. If you want to
set every option for authorized users and public users to none by
default, just delete SOGoCalendarDefaultRoles and its strings from your
config file and restart sogo.

This will definetly change the behavior for NEW calendars. I don't know
exactly whether it will override the settings for existing calendars.


Bye
Georg

-- 
users@sogo.nu
https://inverse.ca/sogo/lists


Re: [SOGo] Caldav URL of a new addressbook

2011-03-08 Thread Michael Noack
I do not know, what the intended solution is (I found none). What I did
is use the URL of a calendar, but exchange Calendar with Contacts than
append the id of my addressbook (which I found in my
db-sogo-sogo_folder_info). The URL should look like this:
http://{fqdn}:{port}/SOGo/dav/{Username}/Contacts/{Contacts-Id}/
This, of course, is by no means a solution for the problem (while the
default addressbook is always personal, users have no way of guessing
the id for any addressbook they create). I would be interested to learn
myself how users are expected to get this URL. I suspect this is a
missing feature.

cheers,
Michael

On 07.03.2011 16:56, Paul van der Vlis wrote:
 Hello,

 When I create a new addressbook, how do I know the caldav URL of it?

 With regards,
 Paul van der Vlis.





signature.asc
Description: OpenPGP digital signature


Re: [SOGo] Caldav URL of a new addressbook

2011-03-08 Thread Paul van der Vlis
Op 08-03-11 10:57, Michael Noack schreef:
 I do not know, what the intended solution is (I found none). What I did
 is use the URL of a calendar, but exchange Calendar with Contacts than
 append the id of my addressbook (which I found in my
 db-sogo-sogo_folder_info). The URL should look like this:
 http://{fqdn}:{port}/SOGo/dav/{Username}/Contacts/{Contacts-Id}/

Yes, that's possible, but not a normal way.

 This, of course, is by no means a solution for the problem (while the
 default addressbook is always personal, users have no way of guessing
 the id for any addressbook they create). I would be interested to learn
 myself how users are expected to get this URL. I suspect this is a
 missing feature.

I think that too. For calendars there is a nice solution:
right-click a calendar | settings | tab links to this calendar
And you can copy the caldav-link there.

With regards,
Paul van der Vlis.




-- 
users@sogo.nu
https://inverse.ca/sogo/lists