@julian Okay, yes, this should work. ICS-Export is not extremely secure. There is a wide range of apps, that can import ICS, but I guess many of them have no ssh-key-validation included and accept any key.
Who enables ICS-export should know, that a capable attacker can find a way to get the ICS of some users.
Hopefully next week, I may find time to have a look on it.
@teh_g said in [nodebb-plugin-calendar] Fully featured calendar plugin for NodeBB - Testers needed:
I think I asked a while ago, but is it possible to add events via an ical feed to this calendar?
The specific one I am looking to add is this one here: http://c.opencritic.com/calendar/OpenCritic.ics
I am very interested in an ICS-export function. I've developed a calendar extension for phpBB, that can export and import ICS. I can write JavaScript, so it should be easy, to port the ICS-function to this calendar.
The difficult/time expensive part would be to create an alternative user login. As ICS requires a simple URL to load the events from, there needs to be an extra ICS download key for each user, that can be put into the URL's query string to enable the ICS download...
@PitaJ Maybe we can work together - with some help regarding the nodeBB's extension structure, it should be possible...
@julian The ICS-Export in my calendar works with an URL like
https://theforum.xy/app.php/calendar/?action=ics&user=2&password=XXXXXX&from=D-10&promoters=27,8
User ID (here 2) and a special password (here XXXXXX) are given in the URL. Yes, it is possible to use HTTP-Passwords as well, but not all clients support this. So I decided to go for the URL-password.
The script, that generates the ICS must be accessible for public. You simply give each user an extra ICS-key in the database and grab the events directly from there. If the rss-token can be used for this - nice. If not, the addon needs to add an extra column in the db.
phpBB has a migrationsystem, that manages databasemodifications for extensions and I needed a felt couple of months to understand this 
. If someone gives me a code point, where the special-key-authentification is done and a database access is possible, I can write the ICS composition for export.
@PitaJ Oh, sorry, I meant we have an explicit group for guests, who are registered users.
The forum is completely closed for public and used by members of our organization and ~some~ people, who are not official members but let's say close to it.
We want to ban this group of users from some categories. So we need an explicit member group. The problem: Our organization is split into several local federations, who have their explicit groups in the forum. New users are assigned to their local group when they were invited. As you can only set one pre-defined group during invitation, we cannot put new users into their local group and the members group. So all users, who are not assigned to the guest group should automatically become members. Otherwise I expect us to get into trouble with the user management.
Admins have their extra-accounts, for administration, which should simply remain admins...
Hope it is clear now.
@julian Okay, yes, this should work. ICS-Export is not extremely secure. There is a wide range of apps, that can import ICS, but I guess many of them have no ssh-key-validation included and accept any key.
Who enables ICS-export should know, that a capable attacker can find a way to get the ICS of some users.
Hopefully next week, I may find time to have a look on it.
Hello,
in our Forum, each user is either a member of our organization, guest or admin. In different to phpBB, the nodeBB's permission system does not allow excluding rules (If I'm right...).
There should be some categories locked for guests. So I'd need an automatically updated group containing all members, who are neither admin nor guest.
Is there a solution for this problem yet?
@teh_g said in [nodebb-plugin-calendar] Fully featured calendar plugin for NodeBB - Testers needed:
I think I asked a while ago, but is it possible to add events via an ical feed to this calendar?
The specific one I am looking to add is this one here: http://c.opencritic.com/calendar/OpenCritic.ics
I am very interested in an ICS-export function. I've developed a calendar extension for phpBB, that can export and import ICS. I can write JavaScript, so it should be easy, to port the ICS-function to this calendar.
The difficult/time expensive part would be to create an alternative user login. As ICS requires a simple URL to load the events from, there needs to be an extra ICS download key for each user, that can be put into the URL's query string to enable the ICS download...
@PitaJ Maybe we can work together - with some help regarding the nodeBB's extension structure, it should be possible...
