[Chandler-dev] Re: [Cosmo-dev] icalUID decisions

[Katie Capps Parlante]

After further discussion today on IRC in #cosmo, we decided to not do 
option A for Preview. We're also not doing option B.

We have two bugs for proceeding with option A (probably in desktop 0.7.1 
and server 0.8 releases).

desktop: handle or avoid duplicate icaluids in collection
https://bugzilla.osafoundation.org/show_bug.cgi?id=10301

server: cosmo to restrict collections to have one icaluid
https://bugzilla.osafoundation.org/show_bug.cgi?id=9985

Randy will check the production data to confirm that we don't see this 
happening in practice right now. If he finds otherwise, then we can 
reconsider.

Cheers,
Katie

Katie Capps Parlante wrote:
> I don't think we've closed on a few decisions wrt handling icalUIDs. If 
> I understand correctly, options available for Preview:
> 
> A. Implement a restriction on the server where no collection has 
> duplicate icaluids. Randy has the implementation ready to go. We'd also 
> need:
> - Error message for clients that try to sync/publish collections with 
> duplicate icaluids
> - Error handling in the desktop (it would be a sharing error for the 
> collection)
> 
> Pros:
> - avoid data on server that we'd need to change later
> - work correctly with CalDAV clients for this case
> Cons:
> - more Preview work, at this point every code change introduces risk
> - desktop experience for this edge case would be a little wonky
> 
> B. Change the desktop ical export behavior to not use uuids as icalUIDs.
> 
> Pros:
> - avoid short term security issue
> Cons:
> - again more work, doesn't really solve the security problem
> 
> The two proposals are orthogonal, we can do either or neither.
> 
> I'll acknowledge that the discussion has been complicated by lack of 
> consensus that the current plan-of-record is the right long term 
> solution (at least on the desktop side), but everyone is pretty focused 
> on getting a wrap on Preview and not wanting to undertake a larger 
> argument.
> 
> Anyone want to weigh in on the Preview decision?
> 
> Cosmo bug:
> https://bugzilla.osafoundation.org/show_bug.cgi?id=9985
> 
> Earlier threads:
> http://lists.osafoundation.org/pipermail/cosmo-dev/2007-July/004207.html
> http://lists.osafoundation.org/pipermail/cosmo-dev/2007-July/004208.html
> 
> Cheers,
> Katie