I may have discovered a possible security issue in the way Kerio Connect's web client displays shared calendars.
When new events are created with caldav and their privacy is set to show only time and date, other caldav devices behave normally and show the event as "private" with the time information only. But in the web client all information is shown just as the event was set to public.
Create 3 new events with Thunderbird's lightning.
Set the privacy in first as "public", second as "show time and date only" and the 3rd "private".
Use another account who can see the first user's account and view the calendar.
In caldav-devices the 2nd event will show up like the 3rd one, (marked "private") but in web client the 2nd shows up just like the 1st one.
We're currently running Kerio Connect 8.3.1.
Thunderbird/Lightning set "CLASS:CONFIDENTIAL" for "show date and time only", it seems this is handled unexpectedly by Connect.
Kerio discussion forums are intended for open communication between forum
members and may contain information and material posted by members which may
be useful in learning about Kerio products. The discussion forums are not
intended to provide technical support for any specific product. Any
information implied or expressed in the discussion forums is that of the
posting member. Kerio is in no way responsible for the information posted in
the forums, or its accuracy. Kerio employees may participate in the
discussions, but their postings do not represent an offical position of the
company on any issues raised or discussed. Kerio reserves the right to
monitor and maintain the forums to promote free and accurate exchange of