Mailing List Archive

PROPPATCH Error: 403
Hello!

I just upgrade my davical Server (to 1.1.4, it's the version Ubuntu has for my
Ubuntu-16.04 LTS) and tried to setup InfCloud (0.13.1).

Now I have the problem, that I cannot select/active the (delegated) calendars.
If I try to save I always get an error, that the settings could not be saved.

I debugged it and the server returned to the PROPPATCH access:

<error xmlns="DAV:">
<write-properties/>You do not have permission to write properties to that resource

I have three users and one group. All users are members of this group (1001) and I use
the group to connect in the InfCloud client (config.js).

I tried to set the privileges in every way and even tried to allow full access
on the group.

I can change data in the addressbook (user 1001) and first found calendar (user 1003)
without problems.

The "grants" table (after deleting by tries) shows the following:

by_principal by_collection to_principal privileges is_group
NULL 1002 1001 000000001111111011100111 NULL
NULL 1004 1001 000000001111111011100111 NULL
NULL 1010 1001 000000001111111011100111 NULL
NULL 1007 1001 000000001111111011100111 NULL

1004 is the calendar of User SA, 1007 of user MR, 1010 of user MR

The "principals" table:
principal_id type_id user_no displayname default_privileges
1009 1 1004 User KR 000000001111111011100111
1006 1 1003 User MR 000000001111111011100111
1003 1 1002 User SA 000000001111111111110111
1 1 1 Administrator 000000000000000000000000
1001 3 1001 Family 000000000001111000000000

The "group_member" table:
group_id member_id
1001 1003
1001 1006
1001 1009

The "usr" table:
user_no [...] username [...]
1004 User KR
1003 User MR
1002 User SA
1 Administrator
1001 Family


Does anybody have an idea what could be wrong?
Any suggestions who to debug it further?

Please help!


Regards
Sven Anders

PS: I don't know if it's important: I had to configure Access-Control-Allow headers for
my setup to make InfCloud to work. PROPPATCH in the Access-Control-Allow-Headers is
enabled.

--
Sven Anders <anders@anduras.de> () UTF-8 Ribbon Campaign
/\ Support plain text e-mail
ANDURAS intranet security AG
Messestrasse 3 - 94036 Passau - Germany
Web: www.anduras.de - Tel: +49 (0)851-4 90 50-0 - Fax: +49 (0)851-4 90 50-55

Those who would give up essential Liberty, to purchase a little
temporary Safety, deserve neither Liberty nor Safety.
- Benjamin Franklin


------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
_______________________________________________
Davical-general mailing list
Davical-general@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/davical-general
Re: PROPPATCH Error: 403 [ In reply to ]
Am 01.09.2018 um 13:04 schrieb Sven Anders:
> Hello!
>
> I just upgrade my davical Server (to 1.1.4, it's the version Ubuntu has for my
> Ubuntu-16.04 LTS) and tried to setup InfCloud (0.13.1).
>
> Now I have the problem, that I cannot select/active the (delegated) calendars.
> If I try to save I always get an error, that the settings could not be saved.
>
> I debugged it and the server returned to the PROPPATCH access:
>
> <error xmlns="DAV:">
> <write-properties/>You do not have permission to write properties to that resource
>
> I have three users and one group. All users are members of this group (1001) and I use
> the group to connect in the InfCloud client (config.js).
>
> I tried to set the privileges in every way and even tried to allow full access
> on the group.
>
> I can change data in the addressbook (user 1001) and first found calendar (user 1003)
> without problems.

Hmmm?!

It seems, that this was a problem with my InfCloud setup.

I used "globalAccountSettings" with a "href" that was missing the name of the group.

href: 'http://davical.server.dom/caldav.php/',

instead of

href: 'http://davical.server.dom/caldav.php/andrie/',

So the InfCloud client tried to save the property as "/caldav.php/" and not
"/caldav.php/andrie/", which was not allowed.

Moreover I had some caching effects that made the debugging difficult.

Sorry for the noise!


Regards
Sven Anders

--
Sven Anders <anders@anduras.de> () UTF-8 Ribbon Campaign
/\ Support plain text e-mail
ANDURAS intranet security AG
Messestrasse 3 - 94036 Passau - Germany
Web: www.anduras.de - Tel: +49 (0)851-4 90 50-0 - Fax: +49 (0)851-4 90 50-55

Those who would give up essential Liberty, to purchase a little
temporary Safety, deserve neither Liberty nor Safety.
- Benjamin Franklin


------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
_______________________________________________
Davical-general mailing list
Davical-general@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/davical-general