nextcloud / nextcloud/calendar
Appointment can only modified by organizer
Nobody has claimed this yet.
- Dominant language
- JavaScript
- Stars
- 1.2k
- Forks
- 332
- Avg merge
- 16h 13m
- Merged PRs (30d)
- 137
Description
Steps to reproduce
- Calender_owner shared calender with Calender_supporter with edit rights.
- Calender_supporter or Calender_owner creating an calender entry
- Calender_owner or Calender_supporter can modify the calender entry
- If one User invites any people to the event, no other User can modify this event in e.g. time. Just the user who did the invite can modify.
- The user who invited others and who can modify, deleting all participants.
- Both users can modify the event again
Expected behavior
In former releases, every user with write permission to the shared calender could modify the event, even if people invited to this event.
At least, if new behaviour is a "security" featuer, the calender owner should be permitted to modify all events/appointments in his calender.
But my expectation is, that it's like in former releases.
So I can have a assistent, managing all events.
Actual behavior
If one User invites any people to the event, no other User can modify this event in e.g. time. Just the user who did the invite can modify.
Calendar app version
6.2.4
CalDAV-clients used
No response
Browser
different e.g. Chrome
Client operating system
Windows
Server operating system
No response
Web server
Apache
Database engine version
MariaDB
PHP engine version
PHP 8.3
Nextcloud version
33.0.2
Updated from an older installed version or fresh install
Updated from an older version
List of activated apps
Nextcloud configuration
Web server error log
Log file
Browser log
Additional info
No response
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start by reproducing the shared-calendar scenario described in the issue on Calendar 6.2.4: invite participants to an event, then try editing it as the other user and as the calendar owner. Trace the permission handling for event updates and add regression coverage; done means users with write access can modify invited events as in former releases.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- javascript, php
- Domain
- authorization, backend
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Quiet
- Clarity
- Mostly clear
- Newbie friendliness
- 48/100