Skip to main content

Potential Bug, unintended behavior with CalDAV - Roundcube

ITHKBO
  • Edited

We just found out that if you disable the feature “Calendars and Contacts” in Feature Manager, the actual button for Calendar stays clickable in Roundcube as webmail user. However, this will immediately throw up an error DAV 403 since the feature behind it is disabled.

While the 403 is intended, it should, of course, not be possible to click on the calendar button in Roundcube at all and prevent the user from initiating the 403.

Is it possible to hide this button in the user interface, either automatically or manually?


Addendum:
This has been confirmed as a bug and is tracked in the below article.
https://support.cpanel.net/hc/en-us/articles/25091728896407-Roundcube-Calendar-results-in-DAV-Error-403-on-accounts-using-Mail-Only-feature-list

Comments

10 comments

Date Votes
  • cPRex Jurassic Moderator

    Hey there!  I wasn't able to reproduce this on cPanel 120 - I disabled Calendars and Contacts from the default feature list, accessed webmail, clicked Calendar, and it loaded a calendar page with no issue.  No errors or anything else odd appeared on the screen.

    Is it possible that user had a shared calendar in place before the feature was disabled?

    If not, are there any other steps I need to follow to reproduce this?

    0
  • ITHKBO

    Hi, thanks for checking this out.

    We tested it with fresh users who had never been used system mail and with regular clients. I can send you a screen capture of the entire procedure on a 120.0.14; however, there are too many things to blur to send it simply in the public thread.

    Do you have a secure method for me to send it in, or should I simply make it a ticket and refer to that here? Zendesk has its obvious limits with this compared to XenForo, unfortunately.

    0
  • cPRex Jurassic Moderator

    If you have reproduction steps it would be best to make a ticket so we can do some additional testing!

    0
  • ITHKBO

    Sure here you go #95341210 and once again thank you for your time.

    0
  • cPRex Jurassic Moderator

    Thanks for that - I'm following along with that now!

    0
  • ITHKBO
    • Edited

    Apparantly this bug has been reported before and a case has been made.


    For those who want to be kept up to date of the situation please follow the article link below.
    https://support.cpanel.net/hc/en-us/articles/25091728896407-Roundcube-Calendar-results-in-DAV-Error-403-on-accounts-using-Mail-Only-feature-list

    Thank you for following along cPRex the ticket has been closed we are following along CPANEL-45735 for future changes.

    1
  • cPRex Jurassic Moderator

    I was just coming here to post that information - thanks for sharing!

    0
  • MinervaH

    Hello, any update on this issue?

    We are seeing this on any feature list with Calendar and Contacts feature disabled, and not just when accessing the calendar, but also clicking 'Refresh' to get new mail, the latter does not always happen, only sometimes. 

    I only see in /usr/local/cpanel/logs/cpdavd_error_log:
    For auth user “$USER” and port “2080”, the owner “$USER” does not have the required “caldavcarddav” feature.

    Any other logs I can look at when this happens?

    Almalinux 9/WHM 120.0.16

    0
  • MinervaH

    > clicking 'Refresh' to get new mail

    Checking:
    /home/$USER/logs/roundcube/errors.log

    I see:
    [02-Sep-2024 15:40:03 +0200]: <203cda26> PHP Error: DAV Error (403):
     in /usr/local/cpanel/base/3rdparty/roundcube/plugins/libkolab/lib/kolab_dav_client.php on line 111 (POST /cpsess6960607088/3rdparty/roundcube/index.php?_task=mail&_action=refresh)

    0
  • cPRex Jurassic Moderator

    I poked the team today and it's still on their radar but they haven't gotten to it just yet. 

    0

Please sign in to leave a comment.

Didn't find what you were looking for?

New post