Sharing calendar via link requires reader to be logged in

cryptpad-user

My understanding/requirement is that I can create a link to share a calendar with anyone who receives the link. I.e. the receiving user can view/edit (depending on how I share) without being required to log in.

Unexpected behavior: When I share a calendar "via Link" and someone uses the link without being logged in, the system responds "You must be logged in to access this page"
Steps to replicate:

Create a new calendar
Click the "settings icon" of that calendar
Select Share; then select "via Link"
Choose "view" (or "edit)"
Click "copy link"
Voila: This is the link that was copied: https://cryptpad.fr/calendar/#/2/calendar/view/HXQGbMWvBkHqqkA32cuZHaNtb7YmugPx5e6ewi8h9sA/
If I now click this link in another browser (that is not logged in), then the abovementioned error message appears...

First question ;-) Is this a security feature or a bug?

Mathilde

Hello,

Thanks for reaching out and for your report!

Guests aren't allowed to create calendars but should be able to access those shared by links. They also should be able to create events in those. So what you reported is definitely a bug. 😊

cryptpad-user

Seems partially fixed now: I can now share + edit on some of my calendars. The default (original) calender still does not work. All calendars that I newly created on top now work as expected.

The workaround that I used:

Export all info from default calendar
Create new calendar and import
Delete original main calendar

Mathilde

Hello!

We have indeed been working on this during last month. Those fixes are live on cryptpad.fr and will be part of the next CryptPad v5.x release that will be published on GitHub soon.

Thanks for your feedback and for the description of import/export procedure!