Is calendar sharing to other users supported?

[rhyst]

Can I share a caldav calendar with another user on my stalwart instance?

Thanks

[mdecimus]

Yes, the documentation for sharing was added 3 days ago (but it was also possible to share when you posted the question):

https://stalw.art/docs/collaboration/sharing

[max-baz]

To share a resource, users must use a CalDAV, CardDAV, or WebDAV client—depending on whether they are sharing a calendar, address book, or file folder—that supports the WebDAV ACL (Access Control List) extension. This standard allows users to assign fine-grained permissions (such as read-only or full access) to other users or groups, directly from within the client interface.

Could you suggest any client that you know of that can manage ACL? It looks surprisingly difficult to find one. I know SOGo can do this, but it feels like a big overkill to setup it only to configure the ACL 😅 Evolution looks among most powerful clients on Linux, and I don't think even it can do this. I couldn't find any CLI apps either, besides doing it via curl.

[max-baz]

And in case anyone is looking for how you do it at least with curl, here you go (includes functions not only for the actual sharing, but also for creating resources and viewing their current shares):

user="..."
password="..."
host="https://mail...."

dump() {
  local type="$1" # 'cal' or 'card'
  local login="$2"
  local id="$3" # e.g. default one has 'default'
  curl -u "$user:$password" \
     -X PROPFIND "$host/dav/$type/$login/$id/" \
     -H "Depth: 0" \
     -H "Content-Type: application/xml"
}

create_calendar() {
  local login="$1"
  local id="$2"
  local name="$3"
  local color="$4" # e.g. '#f00'
  local order="$5" # zero-based index

  curl -u "$user:$password" \
       -X MKCOL "$host/dav/cal/$login/$id/" \
       -H "Depth: 0" \
       -H "Content-Type: application/xml" --data-binary @- <<EOF
<?xml version="1.0" encoding="utf-8"?>
<D:mkcol xmlns:D="DAV:" xmlns:C="urn:ietf:params:xml:ns:caldav">
  <D:set>
    <D:prop>
      <D:resourcetype>
        <D:collection/>
        <C:calendar/>
      </D:resourcetype>
      <D:displayname>$name</D:displayname>
      <calendar-color xmlns="http://apple.com/ns/ical/">$color</calendar-color>
      <calendar-order xmlns="http://apple.com/ns/ical/">$order</calendar-order>
    </D:prop>
  </D:set>
</D:mkcol>
EOF
}

create_contacts() {
  local login="$1"
  local id="$2"
  local name="$3"

  curl -u "$user:$password" \
       -X MKCOL "$host/dav/card/$login/$id/" \
       -H "Depth: 0" \
       -H "Content-Type: application/xml" --data-binary @- <<EOF
<?xml version="1.0" encoding="utf-8"?>
<D:mkcol xmlns:D="DAV:" xmlns:C="urn:ietf:params:xml:ns:carddav">
  <D:set>
    <D:prop>
      <D:resourcetype>
        <D:collection/>
        <C:addressbook/>
      </D:resourcetype>
      <D:displayname>$name</D:displayname>
    </D:prop>
  </D:set>
</D:mkcol>
EOF
}

grant_access() {
  local type="$1"
  local login="$2"
  local id="$3"
  shift 3
  local principals=("$@")

  {
    printf '%s\n' '<?xml version="1.0"?>'
    printf '%s\n' '<acl xmlns="DAV:">'
    for entry in "${principals[@]}"; do
      local write_priv=true
      local principal="$entry"
      if [[ $entry == RO:* ]]; then
        write_priv=false
        principal="${entry#RO:}"
      fi

      printf '%s\n' '  <ace>'
      printf '    <principal><href>/dav/pal/%s/</href></principal>\n' "$principal"
      printf '%s\n' '    <grant>'
      printf '%s\n' '      <privilege><read/></privilege>'
      $write_priv && printf '%s\n' '      <privilege><write/></privilege>'
      printf '%s\n' '    </grant>'
      printf '%s\n' '  </ace>'
    done
    printf '%s\n' '</acl>'
  } | curl -u "$user:$password" \
        -X ACL "$host/dav/$type/$login/$id/" \
        -H "Depth: 0" \
        -H "Content-Type: application/xml" \
        --data-binary @-
}


dump_acl() {
  local type="$1"
  local login="$2"
  local id="$3"

  curl -u "$user:$password" \
    -X PROPFIND "$host/dav/$type/$login/$id/" \
    -H "Depth: 0" \
    -H "Content-Type: application/xml" --data-binary @- <<EOF
<?xml version="1.0" encoding="utf-8"?>
<D:propfind xmlns:D="DAV:">
  <D:prop>
    <D:acl/>
  </D:prop>
</D:propfind>
EOF
}

# examples:
create_calendar john test1 '#f00' 1
grant_access cal john test1 jake mike RO:joan

[mdecimus]

Could you suggest any client that you know of that can manage ACL?

The only one I know of is emClient.

[Novapixel1010]

This is going to sound dump but maybe I missed it in the ui. How would I share a calendar with someone? and then to give them read only I need to use ACL right? I have never used emClient so I will have to install it.

[mdecimus]

You need to use a CalDAV client which supports the WebDAV ACL extension. I believe emClient does.

[Novapixel1010]

It does but I can't use emclient on linux 😢 . So I need to keep windows, is there plan to add this in the UI. For example when a user sign in they can create calendars or address books and then also be able to manage the ACL's.