[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: CAP: CARID:UPDATEPARTSTATUS (Was: Re: VCAR: RIGHTS Value Type Ambiguous)
Bernard Desruisseaux wrote:
> Doug Royer wrote:
> > Changing some one elses ATTENDEE value (for non-owner) is not a
> > reasonable need and I can think of no reason to allow it. If it does
> > not already exist in 2445-2447, then lets just state that in CAP:
> > You can't change components for iTIP generated
> > objects unless you are the ORGANIZER or OWNER.
> > And the OWNER is limited to local changes only
> > when the OWNER is not the ORGANIZER. The only time
> > any OWNER can modify the objects in an iTIP generated
> > object is when it comes from the ORGANIZER. This applies
> > even if there is no specific VCAR. If you do, iTIP breaks.
> > Any UPN that is granted access to modify any iTIP originated
> > object is in effect given proxy OWNERship access as
> > far as the VCAR specifies. And that UPN is limited
> > to the same restrictions as the OWNER even if there
> > is not a specific VCAR. If you do, iTIP breaks.
> To avoid breaking iTIP, I think we should drop the predefined
> CARID:UPDATEPARTSTATUS or at least replace it by a predefined
> CARID (e.g., CARID:DEFAULTORGANIZER) that would be more in line
> with what you said.
> Shall we drop it or replace it?
Nether. Not the same topic.
UPDATEPARTSTATUS allows for the changing of the PARTSTAT,
not the ATTTENDEE value.
org:INET-Consulting LLC <http://INET-Consulting.com
title:Chief Executive Manager