Changed default role for calendar access to show only date and time.

[admins-little-helper]

Contribution Guidelines

• I've read the contribution guidelines and wholeheartedly agree them

What does this PR include?

Short Description

Currently the default calendar shareing permissions in SOGo for events marked as "public" in a personal calendar are set to "ViewAll" for all users in the same domain.
In addition by default new events are created as "public". That results in all users within a domain/org can read events of all other users by default.

To improve security I think the default should be changed to allow only to see date/time of an event ("free/busy"). Every user then still can set sharing permissions individually as needed.

Current default calendar sharing permission:

Proposed change:

Affected Containers

• sogo-mailcow

Did you run tests?

What did you tested?

Edited file data/conf/sogo/sogo.conf and changed

SOGoCalendarDefaultRoles = (
  PublicViewer,
  ConfidentialDAndTViewer,
  PrivateDAndTViewer
);

to this:

SOGoCalendarDefaultRoles = (
  PublicDAndTViewer,
  ConfidentialDAndTViewer,
  PrivateDAndTViewer
);

Restarted containers sogo-mailcow and memcached-mailcow:

docker compose restart sogo-mailcow memcached-mailcow

What were the final results? (Awaited, got)

Works as intendet: the default calendar sharing permissions for new and existing users are set to show date & time only ("free/busy") for events marked as public. Users can change shareing permisisons as they like. In case a user already has changed sharing permissions before, those individual permissions are not changed.