Require name/passwd to list properties, search and get objects

This adds more requests to those requiring authentication.

Signed-off-by: Keith Packard <keithp@keithp.com>

diff --git a/calypso/__init__.py b/calypso/__init__.py
index 9631814a6a3c96cbc348175021352c7bb32b1f09..5597c453b3df9fdf2de99fa598dc260ef5e01e25 100644 (file)
--- a/calypso/__init__.py
+++ b/calypso/__init__.py
@@ -201,6 +201,7 @@ class CalendarHTTPHandler(server.BaseHTTPRequestHandler):
     # Naming methods ``do_*`` is OK here
     # pylint: disable=C0103
 
+    @check_rights
     def do_GET(self):
         """Manage GET request."""
         self.do_HEAD()
@@ -272,6 +273,7 @@ class CalendarHTTPHandler(server.BaseHTTPRequestHandler):
         self.send_header("DAV", "1, calendar-access")
         self.end_headers()
 
+    @check_rights
     def do_PROPFIND(self):
         """Manage PROPFIND request."""
         xml_request = self.rfile.read(int(self.headers["Content-Length"]))
@@ -288,6 +290,7 @@ class CalendarHTTPHandler(server.BaseHTTPRequestHandler):
         print ("answer %s" % self._answer)
         self.wfile.write(self._answer)
 
+    @check_rights
     def do_SEARCH(self):
         """Manage SEARCH request."""
         xml_request = self.rfile.read(int(self.headers["Content-Length"]))