New right "i": Only allowing HTTP method GET

This commit is contained in:
Unrud
2020-04-22 19:20:42 +02:00
parent 9bd852ba5e
commit 7f2d5cea62
5 changed files with 55 additions and 15 deletions

View File

@ -21,10 +21,12 @@ collections and entries.
Permissions:
- R: read a collection (excluding address book or calendar collections)
- r: read an address book or calendar collection
- W: write a collection (excluding address book or calendar collections)
- w: write an address book or calendar collection
- R: read collections (excluding address books and calendars)
- r: read address book and calendar collections
- i: subset of **r** that only allows direct access via HTTP method GET
(CalDAV/CardDAV is susceptible to expensive search requests)
- W: write collections (excluding address books and calendars)
- w: write address book and calendar collections
Take a look at the class ``BaseRights`` if you want to implement your own.