Nextcloud Server Calendar Delegation Missing ACL Fix (Security Patch)

Vulnerability Overview Title: fix: add ACLs for calendar delegation #59962 Description: Introduces appropriate ACLs (Access Control Lists) to support the calendar delegation feature. Scope of Impact Project: Nextcloud Server Versions: Affects multiple versions, including stable31, stable32, stable33, stable34, etc. Impact: The calendar delegation feature may suffer from insufficient permission controls, potentially allowing unauthorized users to access or modify calendar data. Remediation Fix Content: Added ACLs to support the calendar delegation feature. Specific Steps: - Code has been properly formatted. - Commit message includes a Signed-off-by tag. - Includes unit tests, integration tests, and/or acceptance tests. - Includes screenshots before and after frontend and backend changes. - Documentation (manual or wiki) has been updated or is deemed unnecessary. - Backports included where applicable (e.g., bug fixes). - Labels added to specify the target branch/version. - Milestone added to specify the target version. POC Code or Exploit Code No specific POC code or exploit code is included in the page. Additional Information Contributor: hamza221 Reviewers: ChristophWurst, DerDreschner, GVodyanov, kesselb, SebastianKrupinski, toeworld, icewind1991, Altahrim, salmari-dev, nfebe Status: Merged Date: April 28, 2023 Summary This PR aims to address permission control issues in the Nextcloud Server calendar delegation feature by adding ACLs, ensuring that only authorized users can access and modify calendar data. The fix involves code updates across multiple versions and has undergone a rigorous testing and review process.

Goal Reached Thanks to every supporter — we hit 100%!

Nextcloud Server Calendar Delegation Missing ACL Fix (Security Patch)

More from this source