Re: CAP: CARID:UPDATEPARTSTATUS (Was: Re: VCAR: RIGHTS Value Type Ambiguous)

[Doug Royer <Doug@xxxxxxxxx>]

Bernard Desruisseaux wrote:
> 
> Doug Royer wrote:
> >
> > Changing some one elses ATTENDEE value (for non-owner) is not a
> > reasonable need and I can think of no reason to allow it. If it does
> > not already exist in 2445-2447, then lets just state that in CAP:
> >
> >         You can't change components for iTIP generated
> >         objects unless you are the ORGANIZER or OWNER.
> >         And the OWNER is limited to local changes only
> >         when the OWNER is not the ORGANIZER. The only time
> >         any OWNER can modify the objects in an iTIP generated
> >         object is when it comes from the ORGANIZER. This applies
> >         even if there is no specific VCAR. If you do, iTIP breaks.
> >
> >         Any UPN that is granted access to modify any iTIP originated
> >         object is in effect given proxy OWNERship access as
> >         far as the VCAR specifies. And that UPN is limited
> >         to the same restrictions as the OWNER even if there
> >         is not a specific VCAR. If you do, iTIP breaks.
> 
> To avoid breaking iTIP, I think we should drop the predefined
> CARID:UPDATEPARTSTATUS or at least replace it by a predefined
> CARID (e.g., CARID:DEFAULTORGANIZER) that would be more in line
> with what you said.
>
> Shall we drop it or replace it?

Nether. Not the same topic.

UPDATEPARTSTATUS allows for the changing of the PARTSTAT,
not the ATTTENDEE value.

begin:vcard 
n:Royer;Doug
tel;pager:pager@xxxxxxxxx
tel;cell:208-520-4044
tel;fax:866-594-8574
tel;work:866-594-8574
x-mozilla-html:FALSE
url:http://Royer.com/People/Doug
org:INET-Consulting LLC <http://INET-Consulting.com
adr:;;;;;;
version:2.1
email;internet:Doug@xxxxxxxxx
title:Chief Executive Manager
x-mozilla-cpt:;64
fn:Doug Royer
end:vcard