[chandler-users] FREEBUSY: free/busy (only) ticket allows other users to see everything

[Graham Perrin]

User F in their Account Browser creates, for a collection, a ticket that is
free/busy only. 

User F constructs a /pim/ URL with the ticket at its tail.

Recipient R, logged in to Chandler Hub, receives the URL.

User R sees much more than the freedom/business of user F. 
User R sees *everything* in the collection of user F — titles, detail etc.. 

For FREEBUSY, is this normal?

(I imagined that FREEBUSY should show free/busy time, nothing more.)

References

<http://chandlerproject.org/Projects/ChandlerServerEndUserManual#Granting%20a%20Ticket>
<http://tools.ietf.org/html/rfc2445#section-4.6.4>
<http://tools.ietf.org/html/draft-ietf-calsify-rfc2445bis-09#section-3.6.4>
-- 
View this message in context: http://n2.nabble.com/FREEBUSY%3A-free-busy-%28only%29-ticket-allows-other-users-to-see-everything-tp2298550p2298550.html
Sent from the Chandler users mailing list archive at Nabble.com.