From 127d2d9da31be0bc3c99f26107b1bfb76f0785bf Mon Sep 17 00:00:00 2001
From: greta <gretadoci@gmail.com>
Date: Wed, 6 Sep 2023 17:20:48 +0200
Subject: [PATCH] Shared calendars shouldn't allow adding attendees if the
 calendar is not yours

Signed-off-by: greta <gretadoci@gmail.com>
---
 src/components/Editor/Invitees/InviteesList.vue | 14 +++++++++++---
 src/mixins/EditorMixin.js                       | 12 ++++++++++++
 src/views/EditSidebar.vue                       |  3 ++-
 3 files changed, 25 insertions(+), 4 deletions(-)

diff --git a/src/components/Editor/Invitees/InviteesList.vue b/src/components/Editor/Invitees/InviteesList.vue
index a9a186a6f1..10df19b2b4 100644
--- a/src/components/Editor/Invitees/InviteesList.vue
+++ b/src/components/Editor/Invitees/InviteesList.vue
@@ -23,16 +23,16 @@
 
 <template>
 	<div>
-		<InviteesListSearch v-if="!isReadOnly && hasUserEmailAddress"
+		<InviteesListSearch v-if="!isReadOnly && !isSharedWithMe && hasUserEmailAddress"
 			:already-invited-emails="alreadyInvitedEmails"
 			@add-attendee="addAttendee" />
 		<OrganizerListItem v-if="hasOrganizer"
-			:is-read-only="isReadOnly"
+			:is-read-only="isReadOnly || isSharedWithMe"
 			:organizer="calendarObjectInstance.organizer" />
 		<InviteesListItem v-for="invitee in inviteesWithoutOrganizer"
 			:key="invitee.email"
 			:attendee="invitee"
-			:is-read-only="isReadOnly"
+			:is-read-only="isReadOnly || isSharedWithMe"
 			:organizer-display-name="organizerDisplayName"
 			@remove-attendee="removeAttendee" />
 		<NoAttendeesView v-if="isReadOnly && isListEmpty"
@@ -101,6 +101,10 @@ export default {
 			type: Object,
 			required: true,
 		},
+		isSharedWithMe: {
+			type: Boolean,
+			required: true,
+		},
 	},
 	data() {
 		return {
@@ -115,6 +119,9 @@ export default {
 		noInviteesMessage() {
 			return this.$t('calendar', 'No attendees yet')
 		},
+		noOwnerMessage() {
+			return this.$t('calendar', 'You dont own this calendar, so you cannot invite other people')
+		},
 		invitees() {
 			return this.calendarObjectInstance.attendees.filter(attendee => {
 				return !['RESOURCE', 'ROOM'].includes(attendee.attendeeProperty.userType)
@@ -136,6 +143,7 @@ export default {
 		hasOrganizer() {
 			return this.calendarObjectInstance.organizer !== null
 		},
+
 		organizerDisplayName() {
 			return organizerDisplayName(this.calendarObjectInstance.organizer)
 		},
diff --git a/src/mixins/EditorMixin.js b/src/mixins/EditorMixin.js
index 860c3fe79c..d3881ad3a3 100644
--- a/src/mixins/EditorMixin.js
+++ b/src/mixins/EditorMixin.js
@@ -214,6 +214,18 @@ export default {
 
 			return calendar.readOnly
 		},
+		isSharedWithMe() {
+			if (!this.calendarObject) {
+				return true
+			}
+
+			const calendar = this.$store.getters.getCalendarById(this.calendarObject.calendarId)
+			if (!calendar) {
+				return true
+			}
+
+			return calendar.isSharedWithMe
+		},
 		/**
 		 * Returns whether the user is an attendee of the event
 		 *
diff --git a/src/views/EditSidebar.vue b/src/views/EditSidebar.vue
index 6435ef0a72..3bb367521c 100644
--- a/src/views/EditSidebar.vue
+++ b/src/views/EditSidebar.vue
@@ -246,7 +246,8 @@
 			<div class="app-sidebar-tab__content">
 				<InviteesList v-if="!isLoading"
 					:calendar-object-instance="calendarObjectInstance"
-					:is-read-only="isReadOnly" />
+					:is-read-only="isReadOnly"
+					:is-shared-with-me="isSharedWithMe" />
 			</div>
 			<SaveButtons v-if="showSaveButtons"
 				class="app-sidebar-tab__buttons"