New right "i": Only allowing HTTP method GET
This commit is contained in:
@ -21,10 +21,12 @@ collections and entries.
|
||||
|
||||
Permissions:
|
||||
|
||||
- R: read a collection (excluding address book or calendar collections)
|
||||
- r: read an address book or calendar collection
|
||||
- W: write a collection (excluding address book or calendar collections)
|
||||
- w: write an address book or calendar collection
|
||||
- R: read collections (excluding address books and calendars)
|
||||
- r: read address book and calendar collections
|
||||
- i: subset of **r** that only allows direct access via HTTP method GET
|
||||
(CalDAV/CardDAV is susceptible to expensive search requests)
|
||||
- W: write collections (excluding address books and calendars)
|
||||
- w: write address book and calendar collections
|
||||
|
||||
Take a look at the class ``BaseRights`` if you want to implement your own.
|
||||
|
||||
|
Reference in New Issue
Block a user