nextcloud / nextcloud/calendar

Appointment can only modified by organizer

Open
#8,272 2 comments 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

bug needs info
Dominant language
JavaScript
Stars
1.2k
Forks
332
Avg merge
16h 13m
Merged PRs (30d)
137

Description

Steps to reproduce
  1. Calender_owner shared calender with Calender_supporter with edit rights.
  2. Calender_supporter or Calender_owner creating an calender entry
  3. Calender_owner or Calender_supporter can modify the calender entry
  4. If one User invites any people to the event, no other User can modify this event in e.g. time. Just the user who did the invite can modify.
  5. The user who invited others and who can modify, deleting all participants.
  6. Both users can modify the event again
Expected behavior

In former releases, every user with write permission to the shared calender could modify the event, even if people invited to this event.

At least, if new behaviour is a "security" featuer, the calender owner should be permitted to modify all events/appointments in his calender.

But my expectation is, that it's like in former releases.
So I can have a assistent, managing all events.

Actual behavior

If one User invites any people to the event, no other User can modify this event in e.g. time. Just the user who did the invite can modify.

Calendar app version

6.2.4

CalDAV-clients used

No response

Browser

different e.g. Chrome

Client operating system

Windows

Server operating system

No response

Web server

Apache

Database engine version

MariaDB

PHP engine version

PHP 8.3

Nextcloud version

33.0.2

Updated from an older installed version or fresh install

Updated from an older version

List of activated apps

Nextcloud configuration

Web server error log

Log file

Browser log

Additional info

No response

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Start by reproducing the shared-calendar scenario described in the issue on Calendar 6.2.4: invite participants to an event, then try editing it as the other user and as the calendar owner. Trace the permission handling for event updates and add regression coverage; done means users with write access can modify invited events as in former releases.

Written by the indexing model from the issue text.

Assessment

Tech stack
javascript, php
Domain
authorization, backend
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Quiet
Clarity
Mostly clear
Newbie friendliness
48/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.