mirrors/Radicale
1
0
Fork 0
mirror of https://github.com/Kozea/Radicale.git synced 2025-04-05 06:07:35 +03:00
Code Issues Projects Releases Packages Wiki Activity

Merge pull request #480 from Unrud/currentuserprincipal

Browse source 
Ask for authentication if current-user-principal is requested
This commit is contained in:
Guillaume Ayoub 2016-08-13 04:25:55 +02:00 • committed by GitHub
commit 3b29a56c81
2 changed files with 12 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

8
radicale/xmlutils.py
View file

@ -510,6 +510,12 @@ def propfind(path, xml_request, read_collections, write_collections, user):
_tag("ICAL", "calendar-color"),
_tag("CS", "getctag")]
if _tag("D", "current-user-principal") in props and not user:
# Ask for authentication
# Returning the DAV:unauthenticated pseudo-principal as specified in
# RFC 5397 doesn't seem to work with DAVdroid.
return client.FORBIDDEN, None
multistatus = ET.Element(_tag("D", "multistatus"))
collections = []
for collection in write_collections:
@ -524,7 +530,7 @@ def propfind(path, xml_request, read_collections, write_collections, user):
path, collection, props, user, write=False)
multistatus.append(response)
return _pretty_xml(multistatus)
return client.MULTI_STATUS, _pretty_xml(multistatus)
def _propfind_response(path, item, props, user, write=False):