Skip to content

Commit

Permalink
oxdisco: change permission checking from "login" to "metadata"
Browse files Browse the repository at this point in the history
Outlook seems to perform Autodiscover requests not only for the
anchor mailbox, but also for shared stores. That's a bit weird, but
oh well. As Autodiscover is "just metadata" anyway, the strict
permission check to be able to login is too much.

References: DESK-1466
  • Loading branch information
jengelh committed Dec 4, 2023
1 parent 1ca1a66 commit 6397a63
Show file tree
Hide file tree
Showing 2 changed files with 9 additions and 1 deletion.
8 changes: 8 additions & 0 deletions doc/changelog.rst
Original file line number Diff line number Diff line change
@@ -1,3 +1,11 @@
Development 2.19.1
==================

Fixes:

* oxdisco: allow autodiscover for room/equipment stores


Gromox 2.19 (2023-12-04)
========================

Expand Down
2 changes: 1 addition & 1 deletion exch/oxdisco.cpp
Original file line number Diff line number Diff line change
Expand Up @@ -349,7 +349,7 @@ http_status OxdiscoPlugin::proc(int ctx_id, const void *content, uint64_t len) t

sql_meta_result mres{};
if (strncasecmp(email, public_folder_email, 19) != 0) {
auto err = mysql.meta(email, 0, mres);
auto err = mysql.meta(email, WANTPRIV_METAONLY, mres);
if (err != 0) {
mlog(LV_DEBUG, "oxdisco: unknown mailbox \"%s\": %s", email, strerror(err));
return die(ctx_id, 404, "Not Found");
Expand Down

0 comments on commit 6397a63

Please sign in to comment.