Attendees can't see busy slots

[st3iny]

Steps to reproduce

1. Create event and invite someone.
2. Have the other person click on Show busy times in the sidebar.

Expected behaviour

The invited person should either see free/busy slots of attendees or should not be able to click the Show busy times button at all.

Actual behaviour

No busy slots will be shown in the modal. The console logs the same error twice:

Request:

XHRPOSThttp://localhost/remote.php/dav/calendars/admin/outbox/
[HTTP/1.1 403 Forbidden 351ms]

Response:

<?xml version="1.0" encoding="utf-8"?>
<d:error xmlns:d="DAV:" xmlns:s="http://sabredav.org/ns">
  <s:exception>Sabre\DAV\Exception\Forbidden</s:exception>
  <s:message>The organizer in the request did not match any of the addresses for the owner of this inbox</s:message>
</d:error>

Versions

Calendar app version: master
Nextcloud Version: stable21

[ChristophWurst]

I can reproduce. Would be interesting to see if this work in Thunderbird, just to find out if Calendar is doing it wrong.

[tcitworld]

Could you post the request payload as well?

[ChristophWurst]

BEGIN:VCALENDAR
PRODID:-//IDN nextcloud.com//Calendar app 2.2.1//EN
CALSCALE:GREGORIAN
VERSION:2.0
METHOD:REQUEST
BEGIN:VFREEBUSY
DTSTAMP:20210604T115239Z
UID:e659ed46-ea7b-420f-8fac-2aab0733d9f5
DTSTART:20210531T220000Z
DTEND:20210601T220000Z
ORGANIZER;CN=Org:mailto:org@domain.tld
ATTENDEE;CN=Att1:mailto:att1@domain.tld
ATTENDEE;CN=Att2:mailto:att2@domain.tld
END:VFREEBUSY
END:VCALENDAR

[tcitworld]

And is org@domain.tld the email for the user admin, just to be sure?

[st3iny]

The organizer of a free busy request should be the owner of the inbox but we always send the organizer of the event regardless of the querying user. I think that's why the request always fails for attendees.

[provokateurin]

Would it be possible to disable the busy times functionality for these cases? I was thinking busy times were broken because I always checked on an existing event (looking to reschedule it) but then the busy times were always empty. Took me a while to realize that I need to check on a new event...