<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 TRANSITIONAL//EN">
<HTML>
<HEAD>
<META HTTP-EQUIV="Content-Type" CONTENT="text/html; CHARSET=UTF-8">
<META NAME="GENERATOR" CONTENT="GtkHTML/4.8.5">
</HEAD>
<BODY>
Salut Francois,<BR>
<BR>
so my configurations now look like this and up to now are working properly:<BR>
<BR>
in /<TT>etc/radicale/config</TT><BR>
<BLOCKQUOTE TYPE=CITE>
<UL>
<TT>[rights]</TT><BR>
<TT>type = from_file</TT><BR>
<TT>file = /etc/radicale/rights</TT><BR>
</UL>
</BLOCKQUOTE>
<BR>
<TT>rights</TT>:
<BLOCKQUOTE TYPE=CITE>
<UL>
<LI><TT>[group calendar]</TT>
<LI><TT>user: ^(User1|User2)$</TT>
<LI><TT>collection: ^.*/groupcalendar.ics$</TT>
<LI><TT>permission: rw</TT>
<LI><TT># Give write access to owners</TT>
<LI><TT>[owner-write]</TT>
<LI><TT>user: .+</TT>
<LI><TT>collection: ^%(login)s/.+$</TT>
<LI><TT>permission: rw</TT>
</UL>
</BLOCKQUOTE>
<UL>
<BR>
</UL>
rights were previously set to <BR>
<BLOCKQUOTE TYPE=CITE>
<TT>type=owner_only</TT><BR>
</BLOCKQUOTE>
so I think that a sharing of the calendar would not have been possible. In contrast to what I read somewhere (forgot where), that every FBx user could access the calendar. I think we eventually have to change that because this setting does not allow to replace Guhgel's calendar.<BR>
<BR>
By the way, trying to change the settings of a user in Plinth gives an error 500. I have no problem with that right now, but maybe there is a bug?<BR>
<BR>
Dietmar<BR>
<BR>
Am Mittwoch, den 27.04.2016, 20:00 +0200 schrieb Dietmar:<BR>
<BLOCKQUOTE TYPE=CITE>
Merci bien Francois,<BR>
<BR>
I will copy your rights for the owner, but I could not find the general syntax of this file.<BR>
Can I do something like
<BLOCKQUOTE TYPE=CITE>
<PRE>
user: User1,User2,User3
collection: ^.*/OurCalendar.ics
permission: rw
</PRE>
</BLOCKQUOTE>
<BR>
to give the users 1..3 the rights to just the calendar OurCalendar.ics?<BR>
<BR>
This is an intermediate solution I can do, but to have radicale on a level where uneducated users can define access rights, I think this feature has to be added into plinth. Or does Guhgel-Calendar not have such an access control?<BR>
<BR>
Dietmar<BR>
<BR>
Am Mittwoch, den 27.04.2016, 10:09 +0200 schrieb francois@avalenn.eu:
<BLOCKQUOTE TYPE=CITE>
<PRE>
On Tue, Apr 26, 2016 at 08:07:29PM +0200, Dietmar wrote:
<FONT COLOR="#737373">> I am currently playing with radicale, clients are Evolution and an</FONT>
<FONT COLOR="#737373">> Android phone with DAVDroid (was more stable than caldav).</FONT>
<FONT COLOR="#737373">> My use case is that I have one calender (just successfully migrated from</FONT>
<FONT COLOR="#737373">> owncloud) for my family, where we all have read and write access to.</FONT>
<FONT COLOR="#737373">> Now I want to add another calender for friends to organize trips and a</FONT>
<FONT COLOR="#737373">> personal task list (Evolution and OpenTasks). The problem of course is</FONT>
<FONT COLOR="#737373">> that all users have the same rights on all calenders, so my friends</FONT>
<FONT COLOR="#737373">> could read my personal tasks and the family calendar.</FONT>
<FONT COLOR="#737373">> </FONT>
<FONT COLOR="#737373">> Changing this is apparently not so easy as the calendars are managed by</FONT>
<FONT COLOR="#737373">> radicale, not the FBx. </FONT>
<FONT COLOR="#737373">> I have been wondering if one should not be able to define groups</FONT>
<FONT COLOR="#737373">> manually (such as "familyCalender", "friendsCalendar"), assign users to</FONT>
<FONT COLOR="#737373">> these groups, the calendars to the groups and then set the corresponding</FONT>
<FONT COLOR="#737373">> rights in the radicale configuration. This probably is a heavy user</FONT>
<FONT COLOR="#737373">> interface.</FONT>
<FONT COLOR="#737373">> </FONT>
<FONT COLOR="#737373">> Does anyone else have such a use case as me?</FONT>
Yes, and I did not find the way to fulfil it with Radicale when using
it with LDAP backend for authentication.
My current approach is to have three types of calendars :
- private (default) which are accessible only to the owner
- shared which are accessible to all the people having an account on
my freedombox
- public which are accessible to everyone with internet access
The corresponding rights configuration file is :
# This means all users may read and write any collection starting with public.
# We do so by just not testing against the user string.
[public]
user: .*
collection: ^.*/public.*$
permission: rw
# partage is like public but for authenticated users
[shared]
user: .+
collection: ^.*/shared_.*$
permission: rw
# Give write access to owners
[owner-write]
user: .+
collection: ^%(login)s/.+$
permission: rw
François
</PRE>
</BLOCKQUOTE>
<PRE>
_______________________________________________
Freedombox-discuss mailing list
<A HREF="mailto:Freedombox-discuss@lists.alioth.debian.org">Freedombox-discuss@lists.alioth.debian.org</A>
<A HREF="http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/freedombox-discuss">http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/freedombox-discuss</A>
</PRE>
</BLOCKQUOTE>
</BODY>
</HTML>