View Issue Details

Jump to NotesJump to History
IDProjectCategoryView StatusDate SubmittedLast Update
0001939SOGo Connectorwith SOGopublic2012-08-15 01:202014-05-23 08:29
Reportercwright Assigned To 
PrioritynormalSeverityminorReproducibilityalways
Status newResolutionopen 
Product Version10.0 
Summary0001939: Thunderbird read-only address books editable by subscribers
Description

On our setup, Thunderbird users with read-only permissions are able to make edits to their shared address books (edits, deletions, additions). Changes made by a user affect only that user. Changes are reset only by unsubscribing from and resubscribing to an address book.

We do not see this in the SOGo web interface, where address book sharing works as expected.

Software versions:
SOGo 1.3.17
SOGo Integrator 10.0.3
SOGo Connector 10.0.3
Lightning 1.2.3

Additional Information

To reproduce:

1) Create and populate address book Test, share it with UserA and give only the permission "This person can read the cards of this address book".

2) Subscribe UserA to the Test address book.

3) UserA will be able to edit individual cards and mailing lists, affecting only her view of the Test address book.

4) Resubscribing UserA to the Test address book will restore it to its intended state for UserA.

TagsNo tags attached.

Relationships

Relationship GraphDependency Graph
has duplicate 0002763 new 2 issues with Read-Only Address Books 

Activities

Christian Mack

Christian Mack

2012-12-06 07:18

developer   ~0005040

Workaround:
When adding the read-only shared addressbook to Thunderbird, set it also in Thunderbird to "read-only".
cwright

cwright

2012-12-10 23:54

reporter   ~0005059

Last edited: 2012-12-10 23:54

On my (Thunderbird 10) clients the "read-only" check box is greyed out and I'm unable to set this. How did you accomplish it? Thank you.
Christian Mack

Christian Mack

2012-12-11 08:44

developer   ~0005060

You only can set the "read-only" flag, when creating that address book entry in Thunderbird via Connector Add-On.
After creation this is only displayed and therefore greyed out.

I should add, that I don't use Integrator, so I don't know, if that prevents this setting or not.
cwright

cwright

2012-12-12 00:17

reporter   ~0005064

I see what you mean now. From the TB Address Book, using File -> New -> Remote Address Book I can map to the shared book and at that time set the book read only. There are two problems with this for me though: 1) cards and lists don't display unless queried and 2) it's not nearly as easy to manage as it could be through Integrator.

Thank you, though, I do appreciate the information.
cwright

cwright

2014-04-29 19:30

reporter   ~0006979

The patch from issue# 2014 resolves the case when a TB Connector client tries to delete a contact from a read-only book they are subscribed to. Thank you for that!

I still see that a Connector client can edit a card or add a card to a subscribed read-only book. (Again, this only affects the client's local copy until a resubscription to the book.)

Issue History

Date Modified Username Field Change
2012-08-15 01:20 cwright New Issue
2012-12-06 07:18 Christian Mack Note Added: 0005040
2012-12-10 23:54 cwright Note Added: 0005059
2012-12-11 08:44 Christian Mack Note Added: 0005060
2012-12-12 00:17 cwright Note Added: 0005064
2014-04-29 19:30 cwright Note Added: 0006979
2014-05-23 08:29 Christian Mack Relationship added has duplicate 0002763