Calendar user permissions

Hello

I posted this to the dev list, but realised it would
probably be more
appropriate on this list...

I've been scouring the net and I can't seem to find any
reference of
how to give the Calendar user access to the calendar
folders. I'm
getting quite a few of these messages:

Feb 11 05:49:56 Kolab Filter [error] [horde] IMAP Errors
from
createMailBox(user/xxxxx/Calendar): NO, Permission denied
[pid 11334
on line 710 of
"/kolab/lib/php/Kolab/Filter/Resource.php"]
Feb 11 05:49:56 Kolab Filter [error] [horde] Error, could
not open
calendar folder! <ID: <47ABEC65.603xxxxxxxxx>> [pid 11334 on line
1262 of
"/kolab/lib/php/Kolab/Filter/Resource.php"]

I can see that you need to use the cyradm tool and sam
command to set
the permissions, but what *exactly* is the command? I think
it would
be useful to add this to the wiki.

I started with a 2.2beta2 install and have been upgrading -
is this
not set by default at any stage during the install?

Thanks!

-Thomas

_______________________________________________
Kolab-users mailing list
Kolab-userskolab.org
https:
//kolab.org/mailman/listinfo/kolab-users

Hi Thomas,

On Montag, 11. Februar 2008, Thomas Black wrote:
> I posted this to the dev list, but realised it would
probably be more
> appropriate on this list...
correct

> I've been scouring the net and I can't seem to find any
reference of
> how to give the Calendar user access to the calendar
folders. 
> ...
> I can see that you need to use the cyradm tool and sam
command to set
> the permissions, but what *exactly* is the command? 

1. Connect with cyradm to the Kolab imap server as user
manager:
 # /kolab/bin/cyradm --user=manager localhost

2. List all ACLs of your calendar folder:
 lam user/testuser/calendarFolderexample.com

3. Set ACL ('all' permissions) for user 'calendar':
 sam user/testuser/calendarFolderexample.com calendarexample.com all

4. Check the new ACLs:
 lam user/testuser/calendarFolderexample.com


> I think it would be useful to add this to the wiki.
yes, indeed.
There are only a general cyradm section:
http://wiki.kolab.org/index.php/IMAP_mailbox_main
tenance#cyradm

And a page for imap ACL information with some examples: 
http://wiki.
kolab.org/index.php/IMAP_ACL
There, I added the 4 steps above in a new section. Please
edit, if something 
wrong or to short.

> I started with a 2.2beta2 install and have been
upgrading - is this
> not set by default at any stage during the install?
Sorry, I'm not sure...

Regards,
Emanuel

-- 
Emanuel Schütze  |  ++49-541-335 08 38  |  http://www.intevation.de/
Intevation GmbH, Georgstr. 4, 49074 Osnabrück, DE | AG
Osnabrück, HR B 18998
Geschäftsführer: Frank Koormann, Bernhard Reiter, Dr.
Jan-Oliver Wagner

_______________________________________________
Kolab-users mailing list
Kolab-userskolab.org
https:
//kolab.org/mailman/listinfo/kolab-users

"Thomas Black" <tsblackgmail.com> writes:

> Hello
>
> I posted this to the dev list, but realised it would
probably be more
> appropriate on this list...
>
> I've been scouring the net and I can't seem to find any
reference of
> how to give the Calendar user access to the calendar
folders. I'm
> getting quite a few of these messages:
>
> Feb 11 05:49:56 Kolab Filter [error] [horde] IMAP
Errors from
> createMailBox(user/xxxxx/Calendar): NO, Permission
denied [pid 11334
> on line 710 of
"/kolab/lib/php/Kolab/Filter/Resource.php"]
> Feb 11 05:49:56 Kolab Filter [error] [horde] Error,
could not open
> calendar folder! <ID: <47ABEC65.603xxxxxxxxx>> [pid 11334 on line
> 1262 of
"/kolab/lib/php/Kolab/Filter/Resource.php"]
>
> I can see that you need to use the cyradm tool and sam
command to set
> the permissions, but what *exactly* is the command? I
think it would
> be useful to add this to the wiki.
>
> I started with a 2.2beta2 install and have been
upgrading - is this
> not set by default at any stage during the install?

No, this is a user specific thing so it cannot be setup
automatically.

When the user is being created there is no
"Calendar" folder yet. Once
he logs in for the first time with a Groupware client (such
as
Kontact, Outlook + Connector or Horde) this folder will get
created.

At this point the calendar user does not have access to the
mailbox
and the user will have to explicitely allow that. This can
usually
also be done via the client.

In general the feature is underdocumented. At least I didn't
find
anything decent on the subject and only got the required
information
from the code.

Cheers,

Gunnar

>
> Thanks!
>
> -Thomas
>
> _______________________________________________
> Kolab-users mailing list
> Kolab-userskolab.org
> https:
//kolab.org/mailman/listinfo/kolab-users

-- 
______ http://kdab.com
_______________ http://kolab-konsortium.c
om _

prdus Kolab work is funded in part by KDAB and the
Kolab Konsortium

____ http://www.pardus.de
_________________ http://gunnarwrobel.de _
E-mail : prdus.de                                 Dr. Gunnar
Wrobel
Tel.   : +49 700 6245 0000                         
Bundesstrasse 29
Fax    : +49 721 1513 52322                          D-20146
Hamburg
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~~~~~~~
   >> Mail at ease - Rent a kolab groupware server at
prdus <<                 
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~~~~~~~

_______________________________________________
Kolab-users mailing list
Kolab-userskolab.org
https:
//kolab.org/mailman/listinfo/kolab-users

Hi Emanuel

Thanks for this information.

Am I correct in assuming that you need to do this for *each*
mail box
though? Is there not a way that you can just apply blanket
permissions
for the calendar user to all mailboxes, so that you don't
need to run
this each time a new user is added?

Thanks

-Thomas

On Feb 11, 2008 6:24 PM, Emanuel Schütze <emanuelintevation.de> wrote:
> Hi Thomas,
>
> On Montag, 11. Februar 2008, Thomas Black wrote:
> > I posted this to the dev list, but realised it
would probably be more
> > appropriate on this list...
> correct
>
> > I've been scouring the net and I can't seem to
find any reference of
> > how to give the Calendar user access to the
calendar folders.
> > ...
> > I can see that you need to use the cyradm tool and
sam command to set
> > the permissions, but what *exactly* is the
command?
>
> 1. Connect with cyradm to the Kolab imap server as user
manager:
>  # /kolab/bin/cyradm --user=manager localhost
>
> 2. List all ACLs of your calendar folder:
>  lam user/testuser/calendarFolderexample.com
>
> 3. Set ACL ('all' permissions) for user 'calendar':
>  sam user/testuser/calendarFolderexample.com calendarexample.com all
>
> 4. Check the new ACLs:
>  lam user/testuser/calendarFolderexample.com
>
>
> > I think it would be useful to add this to the
wiki.
> yes, indeed.
> There are only a general cyradm section:
> http://wiki.kolab.org/index.php/IMAP_mailbox_main
tenance#cyradm
>
> And a page for imap ACL information with some
examples:
> http://wiki.
kolab.org/index.php/IMAP_ACL
> There, I added the 4 steps above in a new section.
Please edit, if something
> wrong or to short.
>
> > I started with a 2.2beta2 install and have been
upgrading - is this
> > not set by default at any stage during the
install?
> Sorry, I'm not sure...
>
> Regards,
> Emanuel
>
> --
> Emanuel Schütze  |  ++49-541-335 08 38  |  http://www.intevation.de/
> Intevation GmbH, Georgstr. 4, 49074 Osnabrück, DE | AG
Osnabrück, HR B 18998
> Geschäftsführer: Frank Koormann, Bernhard Reiter, Dr.
Jan-Oliver Wagner
>

_______________________________________________
Kolab-users mailing list
Kolab-userskolab.org
https:
//kolab.org/mailman/listinfo/kolab-users

Hi Thomas,

On Tuesday 12 February 2008, Thomas Black wrote:
> Am I correct in assuming that you need to do this for
*each* mail box
> though? Is there not a way that you can just apply
blanket permissions
> for the calendar user to all mailboxes, so that you
don't need to run
> this each time a new user is added?

You can use * to run through all mail boxes with the default
'Calendar' 
folder, e.g.:
 lam user/*/Calendarexample.com

I'm not sure, if there a cyradm command to match *all*
calender folders (with 
folder-type: event). Anybody an idea?


Emanuel

-- 
Emanuel Schütze  |  ++49-541-335 08 38  |  http://www.intevation.de/
Intevation GmbH, Georgstr. 4, 49074 Osnabrück, DE | AG
Osnabrück, HR B 18998
Geschäftsführer: Frank Koormann, Bernhard Reiter, Dr.
Jan-Oliver Wagner

_______________________________________________
Kolab-users mailing list
Kolab-userskolab.org
https:
//kolab.org/mailman/listinfo/kolab-users

On Tuesday 12 February 2008 11:00, Emanuel Schütze wrote:
> I'm not sure, if there a cyradm command to match *all*
calender folders
> (with folder-type: event). Anybody an idea?

I am not aware of such an cyradm command.
You could certainly script it, see
http://kolab.org/cgi-bin/viewcvs-kolab.
cgi/utils/admin/listannotations.pl

-- 
Managing Director - Owner: www.intevation.net       (Free
Software Company)
Germany Coordinator: fsfeurope.org. Coordinator:
www.Kolab-Konsortium.com.
Intevation GmbH, Osnabrück, DE; Amtsgericht Osnabrück, HRB
18998
Geschäftsführer Frank Koormann, Bernhard Reiter, Dr.
Jan-Oliver Wagner

_______________________________________________
Kolab-users mailing list
Kolab-userskolab.org
https:
//kolab.org/mailman/listinfo/kolab-users

On Tuesday 12 February 2008 11:38, Gunnar Wrobel wrote:
> > I started with a 2.2beta2 install and have been
upgrading - is this
> > not set by default at any stage during the
install?
>
> No, this is a user specific thing so it cannot be setup
automatically.

It should be set automatically for resource accounts.
If it is not, this would be a defect and we should create an
issue.

For general users this is not setup by default for security
reasons.
Otherwise the calender user would have much more access.
The less access one user has, the less valuable is to attack
this account.

Bernhard


-- 
Managing Director - Owner: www.intevation.net       (Free
Software Company)
Germany Coordinator: fsfeurope.org. Coordinator:
www.Kolab-Konsortium.com.
Intevation GmbH, Osnabrück, DE; Amtsgericht Osnabrück, HRB
18998
Geschäftsführer Frank Koormann, Bernhard Reiter, Dr.
Jan-Oliver Wagner

_______________________________________________
Kolab-users mailing list
Kolab-userskolab.org
https:
//kolab.org/mailman/listinfo/kolab-users

Hi Berhard

>  It should be set automatically for resource accounts.
>  If it is not, this would be a defect and we should
create an issue.

By resource accounts, do you mean groupware subfolders? What
exactly
do you mean by resource accounts?

I would assume that the calendar groupware folders should
have these
permissions set automatically, that did not appear to be the
case.
This means that each time we add a new user we need to go
set these
permissions, which is a bit of an administrative pain.

Thanks to all for the help.

-Thomas

_______________________________________________
Kolab-users mailing list
Kolab-userskolab.org
https:
//kolab.org/mailman/listinfo/kolab-users

On Friday 15 February 2008 17:58, Thomas Black wrote:
> >  It should be set automatically for resource
accounts.
> >  If it is not, this would be a defect and we
should create an issue.
>
> By resource accounts, do you mean groupware subfolders?
What exactly
> do you mean by resource accounts?

The accounts that are created as "resource"
accounts in the web admin 
interface. You can create "user",
"group" and "resource" accounts.
They can be used to book shared resources, e.g. a room or a
company car.

> I would assume that the calendar groupware folders
should have these
> permissions set automatically, that did not appear to
be the case.

Your assumption is wrong.  
They should not have the calender user permission by
default.
This is only necessary for automatic, server based treatment
of invitation 
emails. Most users would not want this.

> This means that each time we add a new user we need to
go set these
> permissions, which is a bit of an administrative pain.

Do all of your users need the above features?

-- 
Managing Director - Owner: www.intevation.net       (Free
Software Company)
Germany Coordinator: fsfeurope.org. Coordinator:
www.Kolab-Konsortium.com.
Intevation GmbH, Osnabrück, DE; Amtsgericht Osnabrück, HRB
18998
Geschäftsführer Frank Koormann, Bernhard Reiter, Dr.
Jan-Oliver Wagner

_______________________________________________
Kolab-users mailing list
Kolab-userskolab.org
https:
//kolab.org/mailman/listinfo/kolab-users