Avii/Radicale
1
0
Fork 0
Code Issues Pull Requests Actions 2 Packages Projects Releases Wiki Activity

New right "i": Only allowing HTTP method GET

Browse Source
This commit is contained in:
Unrud
2020-04-22 19:20:42 +02:00
parent 9bd852ba5e
commit 7f2d5cea62
5 changed files with 55 additions and 15 deletions
Download Patch File Download Diff File Expand all files Collapse all files

10
DOCUMENTATION.md
View File

@@ -963,10 +963,12 @@ if you want to use regular curly braces in the `user` and `collection` regexes.
The following `permissions` are recognized:
* **R:** read a collection (excluding address book or calendar collections)
* **r:** read an address book or calendar collection
* **W:** write a collection (excluding address book or calendar collections)
* **w:** write an address book or calendar collection
* **R:** read collections (excluding address books and calendars)
* **r:** read address book and calendar collections
* **i:** subset of **r** that only allows direct access via HTTP method GET
(CalDAV/CardDAV is susceptible to expensive search requests)
* **W:** write collections (excluding address books and calendars)
* **w:** write address book and calendar collections
## Storage