Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

fix(download.ts): set events as PRIVATE by default #1003

Closed
wants to merge 1 commit into from

Conversation

calejvaldez
Copy link
Contributor

Summary

I opened #963 a few months ago when I noticed that Google Calendar events imported from AntAlmanac were public for anybody with my UCI email to see. This concerned me because this meant people would know exactly where I'd be and when.

This fixes the issue by setting the classification attribute to PRIVATE on the events in the calendarEvents array, making the event private.

Test Plan

I tested this by downloading the .ics file using a development environment of AntAlmanac with my changes and importing it to my Google Calendar, and successfully saw that it was a private event by default.

Photo of a private event imported from AntAlmanac.

... no I'm not taking ICS 6B. I can never go through that again...

Issues

Closes #963

Copy link
Member

@KevinWu098 KevinWu098 left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM, thanks for this change! 💪

Before merging though, I'm kind of curious as to what effect this has on a per-user / per-event use case. Just because an event is public visibility, doesn't the calendar which it resides need to be shared? I'm mostly curious as to if there's a specific case where specifying the visibility to private would be important and/or common.

@MinhxNguyen7
Copy link
Member

@calejvaldez what do you say about @KevinWu098 's question about the utility? If you share your calendar, wouldn't you want the other person to know when you have class by default? It's not like when you have class is any more private than other events on the calendar, right?

@calejvaldez
Copy link
Contributor Author

@MinhxNguyen7 @KevinWu098 That's true, though my biggest concern was that UCI sets our calendars as shared by default without notifying the user. If we don't specify an event's classification, then it defaults to the UCI default, which is public. As of now, every event that's imported from AntAlmanac uses UCI's default public setting, making it so that all we need to know where somebody will be, and at what time, is their UCI email address.

Unless users specifically go into their Calendar settings and change the default calendar visibility to private, anything they add to their calendar will be shared. In theory, using the default makes sense, though IMO it makes sense if a user is aware their events are public, which the few people I've pointed this out to said they weren't aware.

@MinhxNguyen7
Copy link
Member

I think that setting the visibility to the account's default makes sense, regardless of whether that behavior is desired by the user. Put otherwise, it's not our problem.

Unless there's substantial opinion otherwise, I'm going to close this for now. Sorry to not take your work, and I appreciate your investigation into this.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Google Calendar makes .ics-imported events public
3 participants