Calendar rights

[snakenest]

EGroupware v.17.1.007
OS Linux Centos 7
PHP 5.6.40: apache2handler

I am (user1) creating a new calendar entry for another user (user2)
I add this entry to his calendar (user2). I set rights for user1, and that user may add and edit calendar of user2

How I may block editing that entry for user2?
I whant user2 only view entries what added by user1 to calendar of user2. But if user2 must may add|edit|delete self added entries.

[StefanU]

Hi snake.

EGroupware v.17.1.007

Please update!!!

---

I am (user1) creating a new calendar entry for another user (user2)
I add this entry to his calendar (user2).

What do you mean by “for another user”?
Do you have write access to their calendar and are you in that calendar when you create the appointment?

How I may block editing that entry for user2?

If you have created the appointment in his calendar, esr naturally has the rights to this appointment. After all, it is his calendar.
You cannot restrict the access rights to a personal calendar for the owner.

I whant user2 only view entries what added by user1 to calendar of user2. But if user2 must may add|edit|delete self added entries.

I do not understand your text.
Should user 2 now be able to edit his own appointments?

Basically, there is the possibility to create a user (group) to whose calendar different users have different rights. User 2 can then display this calendar.

Another alternative:
You invite user 2 to an appointment. Then he also has limited editing rights.

Perhaps it would help if you explained what you have in mind and what the overall purpose is.

Stefan

[snakenest]

where I may set that rule in UI?
or I must change php-scripts for make this rule?

[RalfBecker]

That’s not the way it works, neither in EGroupware nor any other calendaring system.

What you can do is to not create an event for the invitee in his own calendar, but create an event in your calendar and invite him. Then he has only certain rights (eg. to accept or decline), but not change the meeting, unless you granted him rights to your calendar.

Ralf

[snakenest]

I whant use this for set work shift of my support worker. They must see that invite but not change. If I use my calendar for this, then that see as garbage dump
As I see, that quickly and easily method if need change working hours.
For example
user1 work at
monday 9:00-12:00
wednesday 12:00-18:00

user2 work at
monday 12:00-18:00
wednesday 9:00-12:00

I set on their calendar “event”. They see, but not has rights for change.

What you can do is to not create an event for the invitee in his own calendar, but create an event in your calendar and invite him. Then he has only certain rights (eg. to accept or decline), but not change the meeting, unless you granted him rights to your calendar.

if i have two worker, that simple and may use only my calendar or create two group calendar for my and user1, and my and user2.
But if I have 10 worker - that grbage

Maybe egw has diffrent way for solve this task?
I find only that. because that very simple, native, and has visualization and friendly gui.

[RalfBecker]

You can try to use category ACL for this:

It was originally meant for a holiday workflow: employee requests holiday by creating an event in his calendar with the given category, responsible person/group changes status to accepted or declined.

Other option not to mess up your calendar is to use a functional user granting you full rights to his calendar, and you create the meeting int the functional users calendar. You can use a private meeting so employees can only see their shifts, if that is desired.

Ralf

[snakenest]

It is perfectly. Thank you. Adding Categories must be inaccessible to the general user.
But the user should not have the right to change the time of the event
Maybe there is a possibility that the user cannot change events of a certain category at all?
rights for restrict add category - cool
rights for set status - cool
rights for edit event in category - ?

[snakenest]

Other option not to mess up your calendar is to use a functional user granting you full rights to his calendar, and you create the meeting int the functional users calendar. You can use a private meeting so employees can only see their shifts, if that is desired.

Thank you. I tried this option.
Yes, it’s better than it was.
But of course it is more difficult, through a separate user …
If I still don’t find a way to refuse the user to edit entries that he didn’t create in his calendar, then I’ll have to use this option.

[snakenest]

solved the problem.

/calendar/inc/class.calendar_bo.php
method
function check_perms($needed,$event=0,$other=0,$date_format=‘ts’,$date_to_read=null,$user=null)
{
…
if ($GLOBALS[‘egw’]->accounts->get_type($owner) == ‘g’ && $needed == Acl::ADD)
{
$access = False; // a group can’t be the owner of an event
}
else
{
$access = $user == $owner || $grant & $needed
&& ($needed == self::ACL_FREEBUSY || !$private || $grant & Acl::PRIVAT);
}
//insert that rule
if ($access && $needed==4 && $event[‘owner’]!==$event[‘creator’]) $access=False;
…
}

this is bad, but it works as it should.
without unnecessary intermediate users and simply by using the event calendar as a work time planner for a large number of employees.