Regular users should not be able to view a connection's calendar event unless they are able to access the event in detail

• Type: Feature Request
• Status: Open
• Priority: Minor
• Resolution: Unresolved
• Affects Version/s: 2.0.2 CE GA1
• Fix Version/s: None
• Component/s: Social Office Site, Social Office Site > Calendar
• Labels: None
• Environment: Tomcat 7.0.25 + MySQL 5. 6.1.10 EE GA1. 6.1.x Plugins GIT ID: 097dba7158b4c9e4d49b0962b41a5418585fa041.
• Business Value: 5
• Similar Issues: Show 5 results ; ;

  SOS-1052	An event with no guest permission is view-able in the Event portlet
  SOS-112	Fix padding of calendar events; Theme calendar navigation in more detail
  SOS-260	Calendar issue when editing events
  SOS-825	Power Users cannot confirm connection
  SOS-189	Display the day's upcoming calendar events for users.

A regular user is able to view a connections' personal calendar event under Activities but when clicking on the link to the Calendar event, the user is taken to an error page. This is due to the fact that a regular user doesn't have permission to access a connections' dashboard page where the event is located. If the regular user does not have permission to access the event's details, a link to the event under activities should not be visible.

Here are the steps to reproduce the original issue:

1. Add a regular Social Office user named User 1
2. Add another regular Social Office user named User 2
3. Sign out
4. Sign in as User 1
5. Add User 2 as a connection
6. Sign out as User 1
7. Sign in as User 2
8. Confirm the connection with User 1
9. Sign out as User 2
10. Sign in as User 1
11. Go to dashboard
12. Add a new page
13. Add a Calendar portlet
14. Add an event
15. Sign out as User 1
16. Sign in as User 2
17. Go to dashboard
18. Under Activities, click on the new event created by User 1
19. The user is taken to an error page.

[Ken Duenwald]

Changing ticket from bug to improvement.

[Evan Thibodeau]

I attached a PDF that includes my analysis of the issue and a possible solution. I think the next step is for program management to review the analysis and decide what the best course of action is.
Thanks