Users with Editor privilege can delete shared calendar [message #140357] |
Fri, 06 July 2018 12:27  |
LWS
Messages: 12 Registered: October 2016
|
|
|
|
Steps to recreate:
Create a calendar in account 1
Share the calendar to all users in domain
Log in as account 2
Can see the shared calendar
Right click, delete
Calendar is deleted from account 1 by account 2
Why is an editor allowed to delete the calendar? Shouldn't this be restricted to Owner permission?
How can users be given read/write access to add/remove items from the calendar without permission to delete the calendar completely?
Thanks in advance
|
|
|
Re: Users with Editor privilege can delete shared calendar [message #140358 is a reply to message #140357] |
Fri, 06 July 2018 14:31  |
LWS
Messages: 12 Registered: October 2016
|
|
|
|
Just to add that I have already seen this from the guides:
Specify the rights for each user you share your calendar with:
Reader -- Users can only see the events (automatically set for Public access).
Editor -- Users can add, delete, and edit events.
Owner -- Users can set sharing as well as add, delete and edit events.
There is no mention there of deleting the entire calendar, only events. In this instance if you create a public shared calendar and give the other user Edit rights that user can then delete the entire calendar.
In my view only an Owner should be able to delete the entire calendar.
|
|
|