Affects Version/s: 2.1.8
Fix Version/s: 2.1.9
Environment:debian, mysql, tomcat 7
If you use for a each calender a one space, to be able to define which user can create events for this calender, they are able to select each calender from the Calendar drop down even if the don't have access to the calender space.
This is not a "real bug" as the event page is created in the space where the user have access but it is shown in the other calender view.
If you want to use the mocca calender as "team" or "department" calenders this should be possible that you can limit the view or creation rights for just the users which are part of the space.
To reproduce this do the following.
Create a space Calender1 and a space Calender2.
User1 have edit rights for space Calender1. User2 have edit rights for space Calender2. In the opposite User1 have read rights on space Calender2 and User2 have read rights on space Calender1.
Create now over the MoccaCalender a Calender which called for example Team1 in space Calender1 and a calender Team2 in space Calender2.
Now go with User1 on the calender Team1 and click on "Create an Event" and you are able to select also Calender Team2 even if you have just read rights in space Calender2.
The Event is than created in space Calender1 but will be shown when you open Team2