[ RFC Index | RFC Search | Usenet FAQs | Web FAQs | Documents | Cities ]

Alternate Formats: rfc4324.txt | rfc4324.txt.pdf

RFC 4324 - Calendar Access Protocol (CAP)


    Search the Archives
Display RFC by number
    


RFC4324 - Calendar Access Protocol (CAP)


Network Working Group                                           D. Royer
Request for Comments: 4324                               IntelliCal, LLC
Category: Experimental                                         G. Babics
                                                                  Oracle
                                                              S. Mansour
                                                                    eBay
                                                           December 2005

                     Calendar Access Protocol (CAP)

Status of This Memo

   This memo defines an Experimental Protocol for the Internet
   community.  It does not specify an Internet standard of any kind.
   Discussion and suggestions for improvement are requested.
   Distribution of this memo is unlimited.

Copyright Notice

   Copyright (C) The Internet Society (2005).

Abstract

   The Calendar Access Protocol (CAP) described in this memo permits a
   Calendar User (CU) to utilize a Calendar User Agent (CUA) to access
   an iCAL-based Calendar Store (CS).  At the time of this writing,
   three vendors are implementing CAP, but it has already been
   determined that some changes are needed.  In order to get
   implementation experience, the participants felt that a CAP
   specification is needed to preserve many years of work.  Many
   properties in CAP which have had many years of debate, can be used by
   other iCalendar protocols.

Table of Contents

   1. Introduction ....................................................5
      1.1. Formatting Conventions .....................................5
      1.2. Related Documents ..........................................6
      1.3. Definitions ................................................7
   2. Additions to iCalendar .........................................11
      2.1.  New Value Types (Summary) ................................14
         2.1.1. New Parameters (summary) .............................14
         2.1.2. New or Updated Properties (summary) ..................14
         2.1.3. New Components (summary) .............................17
      2.2.  Relationship of RFC-2446 (ITIP) to CAP ...................18
   3. CAP Design .....................................................20
      3.1. System Model ..............................................20
      3.2. Calendar Store Object Model ...............................20
      3.3. Protocol Model ............................................21
         3.3.1. Use of BEEP, MIME, and iCalendar .....................22
   4. Security Model .................................................23
      4.1. Calendar User and UPNs ....................................23
         4.1.1. UPNs and Certificates ................................24
         4.1.2. Anonymous Users and Authentication ...................25
         4.1.3. User Groups ..........................................25
      4.2. Access Rights .............................................26
         4.2.1. Access Control and NOCONFLICT ........................26
         4.2.2. Predefined VCARs .....................................26
         4.2.3. Decreed VCARs ........................................28
      4.3. CAP Session Identity ......................................28
   5. CAP URL and Calendar Address ...................................29
   6. New Value Types ................................................30
      6.1. Property Value Data Types .................................30
         6.1.1. CAL-QUERY Value Type .................................30
            6.1.1.1. [NOT] CAL-OWNERS() ..............................36
            6.1.1.2. CURRENT-TARGET() ................................37
            6.1.1.3. PARAM() .........................................37
            6.1.1.4. SELF() ..........................................38
            6.1.1.5. STATE() .........................................38
            6.1.1.6. Use of Single Quote .............................38
            6.1.1.7. Comparing DATE and DATE-TIME Values .............39
            6.1.1.8. DTEND and DURATION ..............................40
            6.1.1.9. [NOT] LIKE ......................................40
            6.1.1.10. Empty vs. NULL .................................41
            6.1.1.11. [NOT] IN .......................................41
            6.1.1.12. DATE-TIME and TIME Values in a WHERE Clause ....42
            6.1.1.13. Multiple Contained Components ..................43
            6.1.1.14. Example, Query by UID ..........................43
            6.1.1.15. Query by Date-Time Range .......................43
            6.1.1.16. Query for All Unprocessed Entries ..............44
            6.1.1.17. Query with Subset of Properties by Date/Time ...44

            6.1.1.18. Query with Components and Alarms in A Range ....45
         6.1.2. UPN Value Type .......................................45
         6.1.3. UPN-FILTER Value .....................................46
   7. New Parameters .................................................48
      7.1. ACTION Parameter ..........................................48
      7.2. ENABLE Parameter ..........................................48
      7.3. ID Parameter ..............................................49
      7.4. LATENCY Parameter .........................................50
      7.5. LOCAL Parameter ...........................................50
      7.6. LOCALIZE Parameter ........................................51
      7.7. OPTIONS Parameter .........................................52
   8. New Properties .................................................52
      8.1. ALLOW-CONFLICT Property ...................................52
      8.2. ATT-COUNTER Property ......................................53
      8.3. CALID Property ............................................54
      8.4. CALMASTER Property ........................................54
      8.5. CAP-VERSION Property ......................................55
      8.6. CARID Property ............................................55
      8.7. CAR-LEVEL Property ........................................56
      8.8. COMPONENTS Property .......................................56
      8.9. CSID Property .............................................58
      8.10. DECREED Property .........................................58
      8.11. DEFAULT-CHARSET Property .................................59
      8.12. DEFAULT-LOCALE Property ..................................60
      8.13. DEFAULT-TZID Property ....................................61
      8.14. DEFAULT-VCARS Property ...................................62
      8.15. DENY Property ............................................62
      8.16. EXPAND property ..........................................63
      8.17. GRANT Property ...........................................64
      8.18. ITIP-VERSION Property ....................................64
      8.19. MAX-COMP-SIZE Property ...................................65
      8.20. MAXDATE Property .........................................65
      8.21. MINDATE Property .........................................66
      8.22. MULTIPART Property .......................................66
      8.23. NAME Property ............................................67
      8.24. OWNER Property ...........................................68
      8.25. PERMISSION Property ......................................68
      8.26. QUERY property ...........................................69
      8.27. QUERYID property .........................................70
      8.28. QUERY-LEVEL Property .....................................70
      8.29. RECUR-ACCEPTED Property ..................................71
      8.30. RECUR-LIMIT Property .....................................71
      8.31. RECUR-EXPAND Property ....................................72
      8.32. RESTRICTION Property .....................................72
      8.33. SCOPE Property ...........................................73
      8.34. STORES-EXPANDED Property .................................74
      8.35. TARGET Property ..........................................74
      8.36. TRANSP Property ..........................................75

   9. New Components .................................................76
      9.1. VAGENDA Component .........................................76
      9.2. VCALSTORE Component .......................................78
      9.3. VCAR Component ............................................80
      9.4. VRIGHT Component ..........................................82
      9.5. VREPLY Component ..........................................83
      9.6. VQUERY Component ..........................................83
   10. Commands and Responses ........................................85
      10.1. CAP Commands (CMD) .......................................85
      10.2. ABORT Command ............................................88
      10.3. CONTINUE Command .........................................89
      10.4. CREATE Command ...........................................90
      10.5. DELETE Command ...........................................96
      10.6. GENERATE-UID Command .....................................98
      10.7. GET-CAPABILITY Command ..................................100
      10.8. IDENTIFY Command ........................................103
      10.9. MODIFY Command ..........................................105
      10.10. MOVE Command ...........................................110
      10.11. REPLY Response to a Command ............................112
      10.12. SEARCH Command .........................................113
      10.13. SET-LOCALE Command .....................................116
      10.14. TIMEOUT Command ........................................118
      10.15. Response Codes .........................................118
   11. Object Registration ..........................................120
      11.1. Registration of New and Modified Entities ...............120
      11.2. Post the Item Definition ................................120
      11.3. Allow a Comment Period ..................................120
      11.4. Release a New RFC .......................................120
   12. BEEP and CAP .................................................120
      12.1. BEEP Profile Registration ...............................120
      12.2. BEEP Exchange Styles ....................................123
      12.3. BEEP Connection Details .................................123
   13. IANA Considerations ..........................................125
   14. Security Considerations ......................................125
   Appendix A.  Acknowledgements ....................................127
   Appendix B.  References ..........................................127
       Appendix B.1.  Normative References ..........................127
       Appendix B.2.  Informative References ........................128

1.  Introduction

   This document specifies the Calendar Access Protocol (CAP).  CAP
   permits a Calendar User (CU) to utilize a Calendar User Agent (CUA)
   to access an iCAL-based Calendar Store (CS) and manage calendar
   information.  In particular, the document specifies how to query,
   create, modify, and delete iCalendar components (e.g., events, to-
   dos, or daily journal entries).  It further specifies how to search
   for available busy time information.  Synchronization with CUAs is
   not covered, but it is believed to be possible using CAP.

   At the time of this writing, three vendors are implementing CAP.  It
   has already been determined that some changes are needed.  In order
   to get implementation experience, the participants felt that a CAP
   specification is needed to preserve many years of work.  Many
   properties in CAP can be used by other iCalendar protocols and have
   had many years of debate.

   CAP is specified as a BEEP (Block Extensible Exchange Protocol)
   "profile" [BEEP] [BEEPGUIDE].  Many aspects of the protocol (e.g.,
   authentication and privacy) are provided within BEEP.  The protocol
   data units of CAP leverage the standard iCalendar format iCAL [iCAL]
   to convey calendar-related information.

   CAP can also be used to store and fetch iCalendar Transport-
   Independent Interoperability Protocol (iTIP) objects [iTIP].  iTIP
   objects used are exactly as defined in [iTIP].  When iCalendar
   objects are transferred between the CUA and a CS, some additional
   properties and parameters may be added; the CUA is responsible for
   correctly generating iCalendar objects to non-CAP processes.

   The definition of new components, properties, parameters, and value
   types are broken into two parts.  The first part summarizes and
   defines the new objects.  The second part provides detail and ABNF
   for those objects.  The ABNF rules for CAP, as for other iCalendar
   specifications, are order-independent.  That is, properties in a
   component may occur in any order, and parameters in any property may
   occur in any order.

1.1.  Formatting Conventions

   The key words "MUST", "MUST NOT", "REQUIRED", "SHALL", "SHALL NOT",
   "SHOULD", "SHOULD NOT", "RECOMMENDED", "MAY" and "OPTIONAL" in this
   document are to be interpreted as described in [RFC2119].

   Calendaring and scheduling roles are referred to in quoted-strings of
   text with the first character of each word in upper case.  For
   example, "Organizer" refers to a role of a "Calendar User" (CU)

   within the protocol defined by [iTIP].  Calendar components defined
   by [iCAL] are referred to with capitalized, quoted-strings of text.
   All iCalendar components should start with the letter "V".  For
   example, "VEVENT" refers to the event calendar component, "VTODO"
   refers to the to-do component, and "VJOURNAL" refers to the daily
   journal component.

   Scheduling methods defined by [iTIP] are referred to with
   capitalized, quoted-strings of text.  For example, "REPLY" refers to
   the method for replying to a "REQUEST".

   CAP commands are referred to by upper-case, quoted-strings of text,
   followed by the word "command".  For example, '"CREATE" command'
   refers to the command for creating a calendar entry, '"SEARCH"
   command' refers to the command for reading calendar components.  CAP
   commands are named using the "CMD" property.

   Properties defined by this memo are referred to with capitalized,
   quoted-strings of text, followed by the word "property".  For
   example, '"ATTENDEE" property' refers to the iCalendar property used
   to convey the calendar address that has been invited to a "VEVENT" or
   "VTODO" component.

   Property parameters defined by this memo are referred to with
   capitalized, quoted-strings of text, followed by the word
   "parameter".  For example, "PARTSTAT" parameter refers to the
   iCalendar property parameter used to specify the participation status
   of an attendee.  Enumerated values defined by this memo are referred
   to with capitalized text, either alone or followed by the word
   "value".

   Object states defined by this memo are referred to with capitalized,
   quoted-strings of text, followed by the word "state".  For example,
   '"BOOKED" state' refers to an object in the booked state.

   Within a query, the different parts are referred to as a "clause" and
   its value as "clause value" and the clause name will be in uppercase
   enclosed in quotes, for example, 'The "SELECT" claus' or 'if the
   "SELECT" clause value contains ...'.

   In tables, the quoted-string text is specified without quotes in
   order to minimize the table length.

1.2.  Related Documents

   Implementers will need to be familiar with several other memos that,
   along with this one, describe the Internet calendaring and scheduling
   standards.  These documents are as follows.

      [iCAL] (RFC2445) specifies the objects, data types, properties and
         property parameters used in the protocols, along with the
         methods for representing and encoding them.

      [iTIP] (RFC2446) specifies an interoperability protocol for
         scheduling between different installations.

      [iMIP] (RFC2447) specifies the Internet email binding for [iTIP].

      [GUIDE] (RFC3283) is a guide to implementers and describes the
         elements of a calendaring system, how they interact with each
         other, how they interact with end users, and how the standards
         and protocols are used.

   This memo does not attempt to repeat the specification of concepts
   and definitions from these earlier memos.  Where possible, references
   are made to the memo that provides the specification of these
   concepts and definitions.

1.3  Definitions

   UNPROCESSED, BOOKED, DELETED -  A conceptual state of an object in
      the calendar store.  There are three conceptual states:
      "UNPROCESSED" state, "BOOKED" state, and marked for deletion,
      which is the "DELETED" state.  How the implementation stores the
      state of any object is not a protocol issue and is not discussed.
      An object can be said to be booked, unprocessed, or marked for
      deletion.

      1.  An "UNPROCESSED" state scheduling object has been stored in
          the calendar store but has not been acted on by a CU or CUA.
          All scheduled entries are [iTIP] objects.  No [iTIP] objects
          in the store are in the "BOOKED" state.  To retrieve any
          [iTIP] object, simply do a query asking for any objects that
          are stored in the "UNPROCESSED" state.

      2.  A "BOOKED" state entry is stored with the "CREATE" command.
          It is an object that has been acted on by a CU or CUA and
          there has been a decision to store an object.  To retrieve any
          booked object, simply do a query asking for any objects that
          were stored in the "BOOKED" state.

      3.  A "DELETED" state entry is created by sending a "DELETE"
          command with the "OPTION" parameter value set to "MARK".  To
          retrieve any deleted object, simply do a query asking for any
          objects that were stored in the "DELETED" state.  By default
          objects marked for delete are not returned.  The CUA must
          specifically ask for marked-for-deletion objects.  You cannot

          ask for components in the "DELETED" state and in other states
          in the same "VQUERY" component, as there would be no way to
          distinguish between them in the reply.

   Calendar -  A collection of logically related objects or entities
      each of which may be associated with a calendar date and possibly
      time of day.  These entities can include calendar properties or
      components.  In addition, a calendar might be related to other
      calendars with the "RELATED-TO" property.  A calendar is
      identified by its unique calendar identifier.  The [iCAL] defines
      the initial calendar properties, calendar components and
      properties that make up the contents of a calendar.

   Calendar Access Protocol (CAP) -  The Internet protocol that permits
      a CUA to access and manipulate calendars residing on a Calendar
      Store.  (This memo.)

   Calendar Access Rights (VCAR) -  The mechanism for specifying the CAP
      operations ("PERMISSION") that a particular calendar user ("UPN",
      defined below) is granted or denied permission to perform on a
      given calendar object ("SCOPE").  The calendar access rights are
      specified with a "VCAR" component.  (Section 9.3)

   Calendar Address -  Also see Calendar URL, which is the same as a CAP
      address.  The calendar address can also be the value to the
      "ATTENDEE" and "ORGANIZER" properties, as defined in [iCAL].
      Calendar URL -  A calendar URL is a URL, defined in this memo,
      that specifies the address of a CS or Calendar.

   Component -  Any object that conforms to the iCalendar object format
      and that is either defined in an Internet Draft, registered with
      IANA, or is an experimental object that is prefixed with "x-".
      Some types of components include calendars, events, to-dos,
      journals, alarms, and time zones.  A component consists of
      properties and possibly other contained components.  For example,
      an event may contain an alarm component.

   Container -  This is a generic name for VCALSTORE or VAGENDA.

   Properties -  An attribute of a particular component.  Some
      properties are applicable to different types of components.  For
      example, the "DTSTART" property is applicable to the "VEVENT",
      "VTODO", and "VJOURNAL" components.  Other components are
      applicable only to an individual type of calendar component.  For
      example, the "TZURL" property may only be applicable to the
      "VTIMEZONE" components.

   Calendar Identifier (CALID) -  A globally unique identifier
      associated with a calendar.  Calendars reside within a CS.  See
      Qualified Calendar Identifier and Relative Calendar Identifier.
      All CALIDs start with "cap:".

   Calendar Policy -  A CAP operational restriction on the access or
      manipulation of a calendar.  These may be outside the scope of the
      CAP protocol.  An example of an implementation or site policy is,
      "events MUST be scheduled in unit intervals of one hour".

   Calendar Property -  An attribute of a calendar ("VAGENDA").  The
      attribute applies to the calendar, as a whole.  For example, the
      "CALSCALE" property specifies the calendar scale (e.g., the
      "GREGORIAN" value) for the all entries within the calendar.

   Calendar Store (CS) -  The data and service model definitions for a
      Calendar Store as defined in this memo.  This memo does not
      specify how the CS is implemented.

   Calendar Server -  An implementation of a Calendar Store (CS) that
      manages one or more calendars.

   Calendar Store Identifier (CSID) -  The globally unique identifier
      for an individual CS.  A CSID consists of the host and port
      portions of a "Common Internet Scheme Syntax" part of a URL, as
      defined by [URL].  The CSID excludes any reference to a specific
      calendar.  (Section 8.9)

   Calendar Store Components -  Components maintained in a CS specify a
      grouping of calendar store-wide information.

   Calendar Store Properties -  Properties maintained in a Calendar
      Store represent store-wide information.

   Calendar User (CU) -  An entity (often biological) that uses a
      calendaring system.

   Calendar User Agent (CUA) -  The client application that a CU
      utilizes to access and manipulate a calendar.

   CAP Session -  An open communication channel between a CUA and a CS.
      If the CAP session is authenticated, the CU is "authenticated" and
      it is an "authenticated CAP session".

   Contained Component / Contained Properties -  A component or property
      that is contained inside of another component.  For example, a
      "VALARM" component may be contained inside a "VEVENT" component,

      and a "TRIGGER" property could be a contained property of a
      "VALARM" component.

   Delegate -  A CU (sometimes called the delegatee) who has been
      assigned participation in a scheduled component (e.g., VEVENT) by
      one of the attendees in the scheduled component (sometimes called
      the delegator).  An example of a delegate is a team member told to
      go to a particular meeting in place of another invitee who is
      unable to attend.

   Designate -  A CU who is authorized to act on behalf of another CU.
      An example of a designate is an assistant.

   Experimental -  The CUA and CS may implement experimental extensions
      to the protocol.  They might also have experimental components,
      properties, and parameters.  These extensions MUST start with "x-"
      (or "X-") and should include a vendor prefix (such as "x-
      myvendor-").  There is no guarantee that these experimental
      extensions will interoperate with other implementations.  There is
      no guarantee that they will not interact in unpredictable ways
      with other vendor experimental extensions.  There is no guarantee
      that the same specific experimental extension is not used by
      multiple vendors in incompatible ways.  Implementations should
      limit sending those extensions to other implementations.

   Object -  A generic name for any component, property, parameter, or
      value type to be used in iCalendar.

   Overlapped Booking -  A policy that indicates whether or not
      components with a "TRANSP" property not set to "TRANSPARENT-
      NOCONFLICT" or "OPAQUE-NOCONFLICT" value can overlap one another.
      When the policy is applied to a calendar it indicates whether or
      not the time span of any component (VEVENT, VTODO, ...) in the
      calendar can overlap the time span of any other component in the
      same calendar.  When applied to an individual object, it indicates
      whether or not any other component's time span can overlap that
      individual component.  If the CS does not allow overlapped
      booking, then the CS is unwilling to allow any overlapped bookings
      within any calendar or entry in the CS.

   Owner -  One or more CUs or UGs that are listed in the "OWNER"
      property in a calendar.  There can be more than one owner.

   Qualified Calendar Identifier (Qualified CALID) -  A CALID in which
      both the scheme and CSID of the CAP URI are present.

   Realm -  A collection of calendar user accounts, identified by a
      string.  The name of the Realm is only used in UPNs.  In order to

      avoid namespace conflict, the Realm SHOULD be postfixed with an
      appropriate DNS domain name (e.g., the foobar Realm could be
      called foobar.example.com).

   Relative Calendar Identifier (Relative CALID) -  An identifier for an
      individual calendar in a calendar store.  It MUST be unique within
      a calendar store.  A Relative CALID consists of the "URL path" of
      the "Common Internet Scheme Syntax" portion of a URL, as defined
      by [URI] and [URLGUIDE].

   Session Identity -  A UPN associated with a CAP session.  A session
      gains an identity after successful authentication.  The identity
      is used in combination with VCAR to determine access to data in
      the CS.

   User Group (UG) -  A collection of Calendar Users and/or User Groups.
      These groups are expanded by the CS and may reside either locally
      or in an external database or directory.  The group membership may
      be fixed or dynamic over time.

   Username -  A name that denotes a Calendar User within a Realm.  This
      is part of a UPN.

   User Principal Name (UPN) -  A unique identifier that denotes a CU or
      a group of CUs.  (Section 6.1.2)

2.  Additions to iCalendar

   Several new components, properties, parameters, and value types are
   added in CAP.  This section summarizes those new objects.

   This memo extends the properties that can go into 'calprops' as
   defined in [iCAL] section 4.6 page 51, to allow [iTIP] objects
   transmitted between a CAP aware CUA and the CS to contain the
   "TARGET" and "CMD" properties.  This memo also adds to the [iCAL]
   ABNF to allow IANA and experimental extensions.  This memo does not
   address how a CUA transmits [iTIP] or [iMIP] objects to non-CAP
   programs.  What follows is ABNF, as described in [ABNF].

      calprops= 2*(

                    ; 'prodid' and 'version' are both REQUIRED,
                    ; but MUST NOT occur more than once.
                    ;
                prodid /version /
                    ;
                    ; These are optional, but MUST NOT occur
                    ; more than once.

                    ;
                calscale        /
                method          /
                cmd             /
                    ;
                    ; Target is optional, and may occur more
                    ; than once.
                    ;
                target / other-props )
                    ;
      other-props  = *(x-prop) *(iana-prop) *(other-props)
                    ;
      iana-prop   = ; Any property registered by IANA directly or
                    ; included in an RFC that may be applied to
                    ; the component and within the rules published.
                    ;
      x-prop      = ; As defined in [iCAL].
                    ;
      methodp     = ; As defined in [iCAL].
                    ;
      prodid      = ; As defined in [iCAL].
                    ;
      calscale    = ; As defined in [iCAL].
                    ;

   Another change is that the 'component' part of the 'icalbody' ABNF as
   described in [iCAL] section 4.6 is optional when sending a command,
   as shown in the following updated ABNF:

      icalbody = calprops component

                ; If the "VCALENDAR" component contains the "CMD"
                ; property then the 'component' is optional:
                ;
                / calprops     ; Which MUST include a "CMD" property
                ;
      component = ; As defined in [iCAL].

   In addition, a problem exists with the control of "VALARM" components
   and their "TRIGGER" properties.  A CU may wish to set its own alarms
   (local alarms) on components.  These local alarms are not to be
   forwarded to other CUs, CUAs, or CSs.  Similarly, the "SEQUENCE"
   property and the "ENABLE" parameter in local alarms are not to be
   forwarded to other CUs, CUAs, or CSs.  Therefore, for the protocol
   between a CUA and a CS, the following changes from [iCAL] section
   4.6.6 page 67 apply to the CAP protocol:

        alarmc     = "BEGIN" ":" "VALARM" CRLF

                     alarm-seq
                     other-props
                     (audioprop / dispprop / emailprop / procprop)
                     "END" ":" "VALARM" CRLF
                     ;
       emailprop   = ; As defined in [iCAL]
                     ;
       procprop    = ; As defined in [iCAL]
                     ;
       dispprop    = ; As defined in [iCAL]
                     ;
       audioprop   = ; As defined in [iCAL]
                     ;
       alarm-seq   = "SEQUENCE" alarmseqparams ":" posint0 CRLF
                     ;
       alarmseqparams = other-params [";" local-param] other-params
                     ;
                     ; Where DIGIT is defined in [iCAL]
                     ;
       posint0     = 1*DIGIT
       posint1     = posintfirst 1*DIGIT
                     ;
                     ; A number starting with 1 through 9.
                     ;
       posintfirst = %x31-39
                     ;
       other-params = *(";" xparam) *(";" iana-params)
                                    *(";" other-params)
                     ;
       iana-params = ; Any parameter registered by IANA directly or
                     ; included in an RFC that may be applied to
                     ; the property and within the rules published.
                     ;
       xparam        ; As defined in [iCAL].
                     ;

   The CUA adds a "SEQUENCE" property to each "VALARM" component as it
   books the component.  This property, along with the "LOCAL" and
   "ENABLE" parameters, allows the CUA to uniquely identify any VALARM
   in any component.  The CUA should remove those before forwarding to
   non-CAP-aware CUAs.

   In addition, if a CUA wished to ignore a "TRIGGER" property in a
   "VALARM" component that was supplied to it by the "Organizer", the
   CUA needs a common way to tag that trigger as disabled.  So the
   following is a modification to [iCAL] section 4.8.6.3 page 127:

      trigger    = "TRIGGER" 1*(";" enable-param) (trigrel / trigabs)

                   ;
      trigrel    = ; As defined in [iCAL].
                   ;
      trigabs    = ; As defined in [iCAL].

   See Section 7.2 and Section 7.5.

2.1.  New Value Types (Summary)

   UPN: The UPN value type is a text value type restricted to only UPN
      values (see Section 6.1.2).

   UPN-FILTER: Like the UPN value type, but also includes filter rules
      that allow wildcards (see Section 6.1.3).

   CALQUERY: The "CAL-QUERY" value type is a query syntax that is used
      by the CUA to specify the rules that apply to a CAP command (see
      Section 6.1.1).

2.1.1.  New Parameters (summary)

   ACTION -  The "ACTION" parameter informs the endpoint if it should
         abort or ask to continue on timeout.  (Section 7.1)

   ENABLE -  The "ENABLE" parameter in CAP is used to tag a property in
      a component as disabled or enabled.  (Section 7.2)

   ID -  The "ID" parameter specifies a unique identifier to be used for
      any outstanding commands.

   LATENCY -  The "LATENCY" parameter supplies the timeout value for
      command completion to the other endpoint.  (Section 7.4)

   LOCAL -  The "LOCAL" parameter in CAP is used to tag a property in a
      component to signify that the component is local or to be
      distributed.  (Section 7.5)

   LOCALIZE -  The "LOCALIZE" parameter specifies the locale to be used
      in error and warning messages.

   OPTIONS -  The "OPTIONS" parameter passes optional information for
      the command being sent.

2.1.2.  New or Updated Properties (summary)

   ALLOW-CONFLICT -  Some entries in a calendar might not be valid if
      other entries were allowed to overlap the same time span.
      (Section 8.1)

   ATT-COUNTER -  When storing a "METHOD" property with the "COUNTER"
      method, there needs to be a way to remember the "ATTENDEE" value
      that sent the COUNTER.  (Section 8.2)

   CAP-VERSION -  The version of CAP that the implementation supports.
      (Section 8.5)

   CAR-LEVEL -  The level of calendar access supported.  (Section 8.7)

   COMPONENTS -  The list of components supported.  (Section 8.8)

   CSID -  The Calendar Store IDentifier (CSID) uniquely identifies a
      CAP server.  (Section 8.9)

   CALID -  Each calendar within a CS needs to be uniquely identifiable.
      The "CALID" property identifies a unique calendar within a CS.  It
      can be a full CALID or a relative CALID.  (Section 8.3)

   CALMASTER -  The "CALMASTER" property specifies the contact
      information for the CS.  (Section 8.4)

   CARID -  Access rights can be saved and fetched by unique ID - the
      "CARID" property.  (Section 8.6)

   CMD -  The CAP commands, as well as replies are transmitted using the
      "CMD" property.  (Section 10.1)

   DECREED -  Some access rights are not changeable by the CUA.  When
      that is the case, the "DECREED" property value in the "VCAR"
      component will be "TRUE".  (Section 8.10)

   DEFAULT-CHARSET -  The list of charsets supported by the CS.  The
      first entry is the default for the CS.  (Section 8.11)

   DEFAULT-LOCALE -  The list of locales supported by the CS.  The first
      entry in the list is the default locale.  (Section 8.12)

   DEFAULT-TZID -  This is the list of known timezones supported.  The
      first entry is the default.  (Section 8.13)

   DEFAULT-VCARS -  A list of the "CARID" properties that will be used
      to create new calendars.  (Section 8.14)

   DENY -  The UPNs listed in the "DENY" property of a "VCAR" component
      will be denied access, as described in the "VRIGHT" component.
      (Section 8.15)

   EXPAND -  This property tells the CS if the query reply should expand
      components into multiple instances.  The default is "FALSE" and is
      ignored for CSs that cannot expand recurrence rules.  (Section
      8.16)

   GRANT -  The UPNs listed in the "GRANT" property of a "VCAR"
      component will be allowed access as described in the "VRIGHT"
      component.  (Section 8.17)

   ITIP-VERSION -  The version of [iTIP] supported.  (Section 8.18)

   MAXDATE -  The maximum date supported by the CS.  (Section 8.20)

   MAX-COMP-SIZE -  The largest component size allowed in the
      implementation including attachments in octets.  (Section 8.19)

   MINDATE -  The minimum date supported by the CS.  (Section 8.21)

   MULTIPART -  Passed in the capability messages to indicate which MIME
      multipart types the sender supports.  (Section 8.22)

   NAME -  The "NAME" property is used to add locale-specific
      descriptions into components.  (Section 8.23)

   OWNER -  Each calendar has at least one "OWNER" property.  (xref
      target="OWNER"/>) Related to the "CAL-OWNERS()" query clause.
      (Section 6.1.1.1)

   PERMISSION -  This property specifies the permission being granted or
      denied.  Examples are the "SEARCH" and "MODIFY" values.  (Section
      8.25)

   QUERY -  Used to hold the CAL-QUERY (Section 8.26) for the component.

   QUERYID -  A unique id for a stored query.  (Section 8.27)

   QUERY-LEVEL -  The level of the query language supported.  (Section
      8.28)

   RECUR-ACCEPTED -  If the implementation support recurrence rules.
      (Section 8.29)

   RECUR-EXPAND -  If the implementation support expanding recurrence
      rules.  (Section 8.31)

   RECUR-LIMIT -  Any maximum limit on the number of instances the
      implementation will expand recurring objects.  (Section 8.30)

   REQUEST-STATUS -  The [iCAL] "REQUEST-STATUS" property is extended to
      include new error numbers.

   RESTRICTION -  In the final check when granting calendar access
      requests, the CS test the results of a command for the value of
      the "RESTRICTION" property in the corresponding "VRIGHT"
      component, to determine if the access meets that restriction.
      (Section 8.32)

   SCOPE -  The "SCOPE" property is used in "VRIGHT"s component to
      select the subset of data that may be acted upon when checking
      access rights.  (Section 8.33)

   SEQUENCE -  When the "SEQUENCE" property is used in a "VALARM"
      component, it uniquely identifies the instances of the "VALARM"
      within that component.

   STORES-EXPANDED -  Specifies if the implementation stores recurring
      objects expanded or not.  (Section 8.34)

   TARGET -  The new "VCALENDAR" component property "TARGET" (Section
      8.35) is used to specify which calendar(s) will be the subject of
      the CAP command.

   TRANSP -  This is a modification of the [iCAL] "TRANSP" property and
      it allows more values.  The new values are related to conflict
      control.  (Section 8.36)

2.1.3.  New Components (summary)

   VAGENDA -  CAP allows the fetching and storing of the entire contents
      of a calendar.  The "VCALENDAR" component is not sufficient to
      encapsulate all of the needed data that describes a calendar.  The
      "VAGENDA" component is the encapsulating object for an entire
      calendar.  (Section 9.1)

   VCALSTORE -  Each CS contains one or more calendars (VAGENDAs), the
      "VCALSTORE" component is the encapsulating object that can hold
      all of the "VAGENDA" components along with any components and
      properties that are unique to the store level.  (Section 9.2)

   VCAR -  Calendar Access Rights are specified and encapsulated in the
      new iCalendar "VCAR" component.  The "VCAR" component holds some
      new properties and at least one "VRIGHT" component.  (Section 9.3)

      VRIGHT -  This component encapsulates a set of instructions to the
      CS to define the rights or restrictions needed.  (Section 9.4)

   VREPLY -  This component encapsulates a set of data that can consist
      of an arbitrary number of properties and components.  Its contents
      are dependent on the command that was issued.  (Section 9.5)

   VQUERY -  The search operation makes use of a new component, called
      "VQUERY" and a new value type "CAL-QUERY" (Section 6.1.1).  The
      "VQUERY" component is used to fetch objects from the CS.  (Section
      9.6)

2.2.  Relationship of RFC-2446 (ITIP) to CAP

   [iTIP] describes scheduling methods that result in indirect
   manipulation of components.  In CAP, the "CREATE" command is used to
   deposit entities into the store.  Other CAP commands, such as
   "DELETE", "MODIFY", and "MOVE" command values, provide direct
   manipulation of components.  In the CAP calendar store model,
   scheduling messages are conceptually kept separate from other
   components by their state.

   All scheduling operations are as defined in [iTIP].  This memo makes
   no changes to any of the methods or procedures described in [iTIP].
   In this memo, referring to the presence of the "METHOD" property in
   an object is the same as saying an [iTIP] object.

   A CUA may create a "BOOKED" state object by depositing an iCalendar
   object into the store.  This is done by depositing an object that
   does not have a "METHOD" property.  The CS then knows to set the
   state of the object to the "BOOKED" state.  If the object has a
   "METHOD" property, then the object is stored in the "UNPROCESSED"
   state.

   If existing "UNPROCESSED" state objects exist in the CS for the same
   UID (UID is defined in [iCAL]), then a CUA may wish to consolidate
   the objects into one "BOOKED" state object.  The CUA would fetch the
   "UNPROCESSED" state objects for that UID and process them in the CUA
   as described in [iTIP].  Then, if the CUA wished to book the UID, the
   CUA would issue a "CREATE" command to create the new "BOOKED" state
   object in the CS, followed by a "DELETE" command to remove any
   related old [iTIP] objects from the CS.  It might also involve the
   CUA sending some [iMIP] objects or contacting other CSs and
   performing CAP operations on those CSs.

   The CUA could also decide not to book the object.  In this case, the
   "UNPROCESSED" state objects could be removed from the CS, or the CUA
   could set those objects to the marked-for-delete state.  The CUA
   could also ignore objects for later processing.

   The marked-for-delete state is used to keep the object around so that
   the CUA can process duplicate requests automatically.  If a duplicate
   [iTIP] object is deposited into the CS and there exists identical
   marked-for-delete objects, then a CUA acting on behalf of the "OWNER"
   can silently drop those duplicate entries.

   Another purpose for the marked-for-delete state is so that, when a CU
   decides they do not wish to have the object show in their calendar,
   the CUA can book the object by changing the "PARTSTAT" parameter to
   "DECLINED" in the "ATTENDEE" property that corresponds to their UPN.
   Then the CUA can perform [iTIP] processing such as sending back a
   decline, and then mark that object as marked-fo-delete.  The CUA
   might be configurable to automatically drop any updates for that
   object, knowing the CU has already declined.

   When synchronizing with multiple CUAs, the marked-for-delete state
   could be used to inform the synchronization process that an object is
   to be deleted.  How synchronization is done is not specified in this
   memo.

   Several "UNPROCESSED" state entries can be in the CS for the same
   UID.  However, once consolidated, only one object exists in the CS
   and that is the booked object.  The other objects MUST be removed or
   have their state changed to "DELETED".

   There MUST NOT be more than one "BOOKED" state object in a calendar
   for the same "UID".  The "ADD" method value may create multiple
   objects in the "BOOKED" state for the same UID; however, for the
   purpose of this memo, they are the same object and simply have
   multiple "VCALENDAR" components.

   For example, if you were on vacation, you could have received a
   "REQUEST" method to attend a meeting and several updates to that
   meeting.  Your CUA would have to issue "SEARCH" commands to find them
   in the CS using CAP, process them, and determine the final state of
   the object from a possible combination of user input and programmed
   logic.  Then the CUA would instruct the CS to create a new booked
   object from the consolidated results.  Finally, the CUA could do a
   "DELETE" command to remove the related "UNPROCESSED" state objects.
   See [iTIP] for details on resolving multiple [iTIP] scheduling
   entries.

3.  CAP Design

3.1.  System Model

   The system model describes the high level components of a calendar
   system and how they interact with each other.

   CAP is used by a CUA to send commands to, and receive responses from,
   a CS.

   The CUA prepares a [MIME] encapsulated message, sends it to the CS,
   and receives a [MIME] encapsulated response.  The calendaring-related
   information within these messages are represented by iCalendar
   objects.  In addition, the "GET-CAPABILITY" command can be sent from
   the CS to the CUA.

   There are two distinct protocols in operation to accomplish this
   exchange.  [BEEP] is the transport protocol used to move these
   encapsulations between a CUA and a CS.  CAP's [BEEP] profile defines
   the application protocol that specifies the content and semantics of
   the messages sent between the CUA and the CS.

3.2.  Calendar Store Object Model

   [iCAL] describes components such as events, todos, alarms, and
   timezones.  CAP requires additional object infrastructure, in
   particular, detailed definitions of the containers for events and
   todos (calendars), access control objects, and a query language.

   The conceptual model for a calendar store is shown below.  The
   calendar store (VCALSTORE - Section 9.2) contains "VCAR"s, "VQUERY"s,
   "VTIMEZONE"s, "VAGENDA"s and calendar store properties.

   Calendars (VAGENDAs) contain "VEVENT"s, "VTODO"s, "VJOURNAL"s,
   "VCAR"s, "VTIMEZONE"s, "VFREEBUSY", "VQUERY"s, and calendar
   properties.

   The component "VCALSTORE" is used to denote the root of the calendar
   store and contains all of the calendars.

   Calendar Store

         VCALSTORE
         |
         +-- properties
         +-- VCARs
         +-- VQUERYs
         +-- VTIMEZONEs
         +-- VAGENDA
         |     |
         |     +--properties
         |     +--VEVENTs
         |     |    |
         |     |    +--VALARMs
         |     +--VTODOs
         |     |    |
         |     |    +--VALARMs
         |     +--VJOURNALs
         |     +--VCARs
         |     +--VTIMEZONEs
         |     +--VQUERYs
         |     +--VFREEBUSYs
         |     |
         |     |   ...
         .
         .
         +-- VAGENDA
         .     .
         .     .
         .     .

   Calendars within a Calendar Store are identified by their unique
   Relative CALID.

3.3.  Protocol Model

   CAP uses [BEEP] as the transport and authentication protocol.

   The initial charset MUST be UTF-8 for a session in an unknown locale.
   If the CS supplied the [BEEP] 'localize' attribute in the [BEEP]
   'greeting', then the CUA may tell the CS to switch locales for the
   session by issuing the "SET-LOCALE" CAP command and supplying one of
   the locales supplied by the [BEEP] 'localize' attribute.  If a locale
   is supplied, the first locale in the [BEEP] 'localize' attribute is
   the default locale of the CS.  The locale is switched only after a
   successful reply.

   The "DEFAULT-CHARSET" property of the CS contains the list of
   charsets supported by the CS with the first value being the default
   for new calendars.  If the CUA wishes to switch to one of those
   charsets for the session, the CUA issues the "SET-LOCALE" command.
   The CUA would have to first perform a "GET-CAPABILITY" command on the
   CS to get the list of charsets supported by the CS.  The charset is
   switched only after a successful reply.

   The CUA may switch locales and charsets as needed.  There is no
   requirement that a CS support multiple locales or charsets.

3.3.1.  Use of BEEP, MIME, and iCalendar

   CAP uses the [BEEP] application protocol over TCP.  Refer to [BEEP]
   and [BEEPTCP] for more information.  The default port on which the CS
   listens for connections is user port 1026.

   The [BEEP] data exchanged in CAP is a iCalendar MIME content that
   fully conforms to [iCAL] iCalendar format.

   This example tells the CS to generate and return 10 UIDs to be used
   by the CUA.  Note that throughout this memo, 'C:' refers to what the
   CUA sends, 'S:' refers to what the CS sends, 'I:' refers to what the
   initiator sends, and 'L:' refers to what the listener sends.  Here
   initiator and listener are used as defined in [BEEP].

      C: MSG 1 2 . 432 62
      C: Content-Type: text/calendar
      C:
      C: BEGIN:VCALENDAR
      C: VERSION:2.0
      C: PRODID:-//someone's prodid
      C: CMD;ID=unique-per-cua-123;OPTIONS=10:GENERATE-UID
      C: END:VCALENDAR

   NOTE: The following examples will not include the [BEEP] header and
   footer information.  Only the iCalendar objects that are sent between
   the CUA and CS will be shown because the [BEEP] payload boundaries
   are independent of CAP.

   The commands listed below are used to manipulate or access the data
   on the calendar store:

   ABORT -  Sent to halt the processing of some of the commands.
      (Section 10.2)

   CONTINUE -  Sent to continue processing a command that has reached
      its specified timeout time.  (Section 10.3)

   CREATE -  Create a new object on the CS.  Initiated only by the CUA.
      (Section 10.4)

   SET-LOCALE -  Tell the CS to use any named locale and charset
      supplied.  Initiated by the CUA only.  (Section 10.13)

   DELETE -  Delete objects from the CS.  Initiated only by the CUA.
      Can also be used to mark an object for deletion.  (Section 10.5)

   GENERATE-UID -  Generate one or more unique ids.  Initiated only by
      the CUA.  (Section 10.6)

   GET-CAPABILITY - Query the capabilities of the other end point of the
      session.  (Section 10.7)

   IDENTIFY -  Set a new identity for the session.  Initiated only by
      the CUA.  (Section 10.8)

   MODIFY -  Modify components.  Initiated by the CUA only.  (Section
      10.9)

   MOVE -  Move components to another container.  Initiated only by the
      CUA.  (Section 10.10)

   REPLY -  When replying to a command, the "CMD" value will be set to
      "REPLY" so that it will not be confused with a new command.
      (Section 10.11)

   SEARCH -  Search for components.  Initiated only by the CUA.
      (Section 10.12)

   TIMEOUT -  Sent when a specified amount of time has lapsed and a
      command has not finished.  (Section 10.14)

4.  Security Model

   BEEP transport performs all session authentication.

4.1.  Calendar User and UPNs

   A CU is an entity that can be authenticated.  It is represented in
   CAP as a UPN, which is a key part of access rights.  The UPN
   representation is independent of the authentication mechanism used
   during a particular CUA/CS interaction.  This is because UPNs are
   used within VCARs.  If the UPN were dependent on the authentication
   mechanism, a VCAR could not be consistently evaluated.  A CU may use
   one mechanism while using one CUA, but the same CU may use a

   different authentication mechanism when using a different CUA, or
   while connecting from a different location.

   The user may also have multiple UPNs for various purposes.

   Note that the immutability of the user's UPN may be achieved by using
   SASL's authorization identity feature.  The transmitted authorization
   identity may be different than the identity in the client's
   authentication credentials [SASL, section 3].  This also permits a CU
   to authenticate using their own credentials, yet request the access
   privileges of the identity for which they are proxying SASL.  Also,
   the form of authentication identity supplied by a service like TLS
   may not correspond to the UPNs used to express a server's access
   rights, requiring a server-specific mapping to be done.  The method
   by which a server determines a UPN, based on the authentication
   credentials supplied by a client, is implementation-specific.  See
   [BEEP] for authentication details; [BEEP] relies on SASL.

4.1.1.  UPNs and Certificates

   When using X.509 certificates for purposes of CAP authentication, the
   UPN should appear in the certificate.  Unfortunately, there is no
   single correct guideline for which field should contain the UPN.

   Quoted from RFC-2459, section 4.1.2.6 (Subject):

         If subject naming information is present only in the
         subjectAlt-Name extension (e.g., a key bound only to an email
         address or URI), then the subject name MUST be an empty
         sequence and the subjectAltName extension MUST be critical.

         Implementations of this specification MAY use these comparison
         rules to process unfamiliar attribute types (i.e., for name
         chaining).  This allows implementations to process certificates
         with unfamiliar attributes in the subject name.

         In addition, legacy implementations exist where an RFC 2822
         name [RFC2822] is embedded in the subject distinguished name as
         an EmailAddress attribute.  The attribute value for
         EmailAddress is of type IA5String to permit inclusion of the
         character '@', which is not part of the PrintableString
         character set.  EmailAddress attribute values are not case
         sensitive (e.g., "fanfeedback@redsox.example.com" is the same
         as "FANFEEDBACK@REDSOX.EXAMPLE.COM").

         Conforming implementations generating new certificates with
         electronic mail addresses MUST use the rfc822Name in the
         subject alternative name field (see sec. 4.2.1.7 of [X509CRL])

         to describe such identities.  Simultaneous inclusion of the
         EmailAddress attribute in the subject distinguished name to
         support legacy implementations is deprecated but permitted.

   Since no single method of including the UPN in the certificate will
   work in all cases, CAP implementations MUST support the ability to
   configure what the mapping will be by the CS administrator.
   Implementations MAY support multiple mapping definitions, for
   example, the UPN may be found in either the subject alternative name
   field, or the UPN may be embedded in the subject distinguished name
   as an EmailAddress attribute.

   Note: If a CS or CUA is validating data received via [iMIP], if the
   "ORGANIZER" or "ATTENDEE" properties said, for example,
   "ATTENDEE;CN=Joe Random User:MAILTO:juser@example.com", then the
   email address should be checked against the UPN.  This is so the
   "ATTENDEE" property cannot be changed to something misleading like
   "ATTENDEE;CN=Joe Rictus User:MAILTO:jrictus@example.com" and have it
   pass validation.  Note that it is the email addresses that
   miscompare, the CN miscompare is irrelevant.

4.1.2.  Anonymous Users and Authentication

   Anonymous access is often desirable.  For example, an organization
   may publish calendar information that does not require any access
   control for viewing or login.  Conversely, a user may wish to view
   unrestricted calendar information without revealing their identity.

4.1.3.  User Groups

   A User Group is used to represent a collection of CUs or other UGs
   that can be referenced in VCARs.  A UG is represented in CAP as a
   UPN.  The CUA cannot distinguish between a UPN that represents a CU
   or a UG.

   UGs are expanded as necessary by the CS.  The CS MAY expand a UG
   (including nested UGs) to obtain a list of unique CUs.  Duplicate
   UPNs are filtered during expansion.

   How the UG expansion is maintained across commands is
   implementation-specific.  A UG may reference a static list of
   members, or it may represent a dynamic list.  Operations SHOULD
   recognize changes to UG membership.

   CAP does not define commands or methods for managing UGs.

4.2.  Access Rights

   Access rights are used to grant or deny access to calendars,
   components, properties, and parameters in a CS to a CU.  CAP defines
   a new component type called a Calendar Access Right (VCAR).
   Specifically, a "VCAR" component grants, or denies, UPNs the right to
   search and write components, properties, and parameters on calendars
   within a CS.

   The "VCAR" component model does not put any restriction on the
   sequence in which the object and access rights are created.  That is,
   an object associated with a particular "VCAR" component might be
   created before or after the actual "VCAR" component is defined.  In
   addition, the "VCAR" and "VEVENT" components might be created in the
   same iCalendar object and passed together in a single object.

   All rights MUST be denied unless specifically granted.

   If two rights specified in "VCAR" components are in conflict, the
   right that denies access always takes precedence over the right that
   grants access.  Any attempt to create a "VCAR" component that
   conflicts with a "VCAR" components with a "DECREED" property set to
   the "TRUE" value must fail.

4.2.1.  Access Control and NOCONFLICT

   The "TRANSP" property can take on values -- "TRANSPARENT-NOCONFLICT"
   and "OPAQUE-NOCONFLICT" -- that prohibit other components from
   overlapping it.  This setting overrides access.  The "ALLOW-CONFLICT"
   CS, Calendar or component setting may also prevent overlap, returning
   an error code "6.3".

4.2.2.  Predefined VCARs

   The predefined calendar access CARIDs that MUST be implemented are:

      CARID:READBUSYTIMEINFO -  Specifies the "GRANT" and "DENY" rules
         that allow UPNs to search "VFREEBUSY" components.  An example
         definition for this VCAR is:

            BEGIN:VCAR
            CARID:READBUSYTIMEINFO
            BEGIN:VRIGHT
            GRANT:*
            PERMISSION:SEARCH
            SCOPE:SELECT * FROM VFREEBUSY WHERE STATE() = 'BOOKED'
            END:VRIGHT
            END:VCAR

      CARID:REQUESTONLY -  Specifies the "GRANT" and "DENY" rules to
         UPNs other than the owner of the calendar and specifies the
         ability to write new objects with the "METHOD" property set to
         the "REQUEST" value.  This CARID allows the owner to specify
         which UPNs are allowed to make scheduling requests.  An example
         definition for this VCAR is:

            BEGIN:VCAR
            CARID:REQUESTONLY
            BEGIN:VRIGHT
            GRANT:NON CAL-OWNERS()
            PERMISSION:CREATE
            RESTRICTION:SELECT VEVENT FROM VAGENDA
                WHERE METHOD = 'REQUEST'
            RESTRICTION:SELECT VTODO FROM VAGEND
                WHERE METHOD = 'REQUEST'
            RESTRICTION:SELECT VJOURNAL FROM VAGEND
                WHERE METHOD = 'REQUEST'
            END:VRIGHT
            END:VCAR

      CARID:UPDATEPARTSTATUS -  Grants authenticated users the right to
         modify the instances of the "ATTENDEE" property set to one of
         their calendar addresses in any components for any booked
         component containing an "ATTENDEE" property.  This allows (or
         denies) a CU the ability to update their own participation
         status in a calendar where they might not otherwise have
         "MODIFY" command access.  They are not allowed to change the
         "ATTENDEE" property value.  An example definition for this VCAR
         (only affecting the "VEVENT" components) is:

            BEGIN:VCAR
            CARID:UPDATEPARTSTATUS
            BEGIN:VRIGHT
            GRANT:*
            PERMISSION:MODIFY
            SCOPE:SELECT ATTENDEE FROM VEVENT
             WHERE ATTENDEE = SELF()
             AND ORGANIZER = CURRENT-TARGET()
             AND STATE() = 'BOOKED'
            RESTRICTION:SELECT * FROM VEVENT
             WHERE ATTENDEE = SELF()
            END:VRIGHT
            END:VCAR

      CARID:DEFAULTOWNER -  Grants to any owner the permission they have
         for the target.  An example definition for this VCAR is:

            BEGIN:VCAR
            CARID:DEFAULTOWNER
            BEGIN:VRIGHT
            GRANT:CAL-OWNERS()
            PERMISSION:*
            SCOPE:SELECT * FROM VAGENDA
            END:VRIGHT
            END:VCAR

4.2.3.  Decreed VCARs

   A CS MAY choose to implement and allow persistent immutable VCARs
   that may be configured by the CS administrator.  A reply from the CS
   may dynamically create "VCAR" components that are decreed depending
   on the implementation.  To the CUA, any "VCAR" component with the
   "DECREED" property set to "TRUE" cannot be changed by the currently
   authenticated UPN, and, depending on the implementation and other
   "VCAR" components, might not be able to be changed by any UPN using
   CAP (never when the CUA gets a "DECREED:TRUE" VCAR).

   When a user attempts to modify or override a decreed "VCAR" component
   rules, an error will be returned indicating that the user has
   insufficient authorization to perform the operation.  The reply to
   the CUA MUST be the same as if a non-decreed VCAR caused the failure.

   The CAP protocol does not define the semantics used to initially
   create a decreed VCAR.  This administrative task is outside the scope
   of the CAP protocol.

   For example, an implementation or a CS administrator may wish to
   define a VCAR that will always allow the calendar owners to have full
   access to their own calendars.

   Decreed "VCAR" components MUST be readable by the calendar owner in
   standard "VCAR" component format.

4.3.  CAP Session Identity

   A [BEEP] session has an associated set of authentication credentials,
   from which is derived a UPN.  This UPN is the identity of the CAP
   session, and is used to determine access rights for the session.

   The CUA may change the identity of a CAP session by calling the
   "IDENTIFY" command.  The CS only permits the operation if the
   session's authentication credentials are good for the requested
   identity.  The method of checking this permission is implementation-
   dependent, but it may be thought of as a mapping from authentication
   credentials to UPNs.  The "IDENTIFY" command allows a single set of

   authentication credentials to choose from multiple identities, and
   allows multiple sets of authentication credentials to assume the same
   identity.

   For anonymous access, the identity of the session is "@".  A UPN with
   a null Username and null Realm is anonymous.  A UPN with a null
   Username but non-null Realm (e.g.,"@example.com") may be used to mean
   any identity from that Realm.  This is useful to grant access rights
   to all users in a given Realm.  A UPN with a non-null Username and
   null Realm (e.g., "bob@") could be a security risk and MUST NOT be
   used.

   Because the UPN includes Realm information, it may be used to govern
   calendar store access rights across Realms.  However, governing
   access rights across Realms is only useful if login access is
   available.  This could be done through a trusted server relationship
   or a temporary account.  Note that trusted server relationships are
   outside the scope of CAP.

   The "IDENTIFY" command also provides for a weak group implementation.
   By allowing multiple sets of authentication credentials belonging to
   different users to identify as the same UPN, that UPN essentially
   identifies a group of people, and may be used for group calendar
   ownership, or the granting of access rights to a group.

5.  CAP URL and Calendar Address

   The CAP URL scheme is used to designate both calendar stores and
   calendars accessible using the CAP protocol.

   The CAP URL scheme conforms to the generic URL syntax defined in RFC
   2396 and follows the Guidelines for URL Schemes set forth in RFC
   2718.

   A CAP URL begins with the protocol prefix "cap" and is defined by the
   following grammar.

      capurl   = "cap://" csidpart [ "/" relcalid ]
                      ;
      csidpart = hostport   ; As defined in Section 3.2.2 of RFC 2396
                            ;
      relcalid = *uric      ; As defined in Section 2 of RFC 2396

   A 'relcalid' is an identifier that uniquely identifies a calendar on
   a particular calendar store.  There is no implied structure in a
   Relative CALID (relcalid).  It may refer to the calendar of a user or
   of a resource such as a conference room.  It MUST be unique within
   the calendar store.

   Here are some examples:

      cap://cal.example.com
      cap://cal.example.com/Company/Holidays
      cap://cal.example.com/abcd1234Usr

   A 'relcalid' is permitted and is resolved according to the rules
   defined in Section 5 of RFC 2396.

   Examples of valid relative CAP URLs:

      opqaueXzz123String
      UserName/Personal

   Calendar addresses can be described as qualified or relative CAP
   URLs.

   For a user currently authenticated to the CS on cal.example.com,
   these two example calendar addresses refer to the same calendar:

      cap://cal.example.com/abcd1234USR
      abcd1234USR

6.  New Value Types

   The following sections contains new components, properties,
   parameters, and value definitions.

   The purpose of these is to extend the iCalendar objects in a
   compatible way so that existing iCalendar "VERSION" property "2.0"
   value parsers can still parse the objects without modification.

6.1.  Property Value Data Types

6.1.1.  CAL-QUERY Value Type

   Subject: Registration of text/calendar MIME value type CAL-QUERY

   Value Name: CAL-QUERY

   Value Type Purpose: This value type is used to identify values and
      contains query statements targeted at locating those values.  This
      is based on [SQL92] and [SQLCOM].

      1.  For the purpose of a query, all components should be handled
          as tables, and the properties of those components should be
          handled as columns.

      2.  All VAGENDAs and CSs look like tables for the purpose of a
          QUERY, and all of their properties look like columns in those
          tables.

      3.  You MUST NOT do any cross-component-type joins.  That means
          you can ONLY have one component OR one "VAGENDA" component OR
          one "VCALSTORE" component in the "FROM" clause.

      4.  Everything in the "SELECT" clause and "WHERE" clauses MUST be
          from the same component type or "VAGENDA" component OR
          "VCALSTORE" component in the "FROM" clause.

      5.  When multiple "QUERY" properties are supplied in a single
          "VQUERY" component, the results returned are the same as the
          results returned for multiple "VQUERY" components that each
          have a single "QUERY" property.

      6.  The '.' is used to separate the table name (component) and
          column name (property or component) when selecting a property
          that is contained inside a component that is targeted in the
          TARGET property.

      7.  A contained component without a '.' is not the same as
          "component-name.*".  If given as "component-name" (no dot),
          the encapsulating BEGIN/END statement will be supplied for
          "component-name".

   In the following example, '.' is used to separate the "TRIGGER"
   property from its contained component (VALARM), which is contained in
   any "VEVENT" component in the selected "TARGET" property value (a
   relcalid).  All "TRIGGER" properties in any "VEVENT" component in
   relcalid would be returned.

      TARGET:relcalid
      QUERY:SELECT VALARM.TRIGGER FROM VEVENT
      SELECT VALARM FROM VEVENT WHERE UID = "123"

   This returns one BEGIN/END "VALARM" component for each "VALARM"
   component in the matching "VEVENT" component.  As there is no '.'
   (dot) in the VALARM after the SELECT above, it returns:

      BEGIN:VALARM
      TRIGGER;RELATED=END:PT5M
      REPEAT:4
      ...
      END:VALARM
      BEGIN:VALARM
      TRIGGER;RELATED=START:PT5M
      DURATION:PT10M
      ...
      END:VALARM
      ...
      ...

  If the SELECT parameter is provided as "component-name.*", then only
  the properties and any contained components will be returned.  The
  example:

     SELECT VALARM.* FROM VEVENT WHERE UID = "123"

  will return all of the properties in each "VALARM" component in the
  matching "VEVENT" component:

      TRIGGER;RELATED=END:PT5M
      REPEAT:4
      ...
      TRIGGER;RELATED=START:PT5M
      DURATION:PT10M
      ...
      ...

  In the following SELECT clauses:

     (a) SELECT <a-property-name> FROM VEVENT

     (b) SELECT VALARM FROM VEVENT

     (c) SELECT VALARM.* FROM VEVENT

     (d) SELECT * FROM VEVENT

     (e) SELECT * FROM VEVENT WHERE
             VALARM.TRIGGER < '20020201T000000Z'
             AND VALARM.TRIGGER > '20020101T000000Z'

  Clause (a) elects all instances of <a-property-name> from all "VEVENT"
  components.

  Clauses (b) and (c) select all "VALARM" components from all "VEVENT"
  components. (b) would return them in BEGIN/END VALARM tags. (c) would
  return all of the properties without BEGIN/END VALARM tags.

  Clause (d) selects every property and every component that is in any
  "VEVENT" component, with each "VEVENT" component wrapped in a
  BEGIN/END VEVENT tags.

  Clause (e) selects all properties and all contained components in all
  "VEVENT" components that have a "VALARM" component with a "TRIGGER"
  property value between the provided dates and times, with each
  "VEVENT" component wrapped in BEGIN/END VEVENT tags.

   Here are two invalid SELECT clauses:

      (f) SELECT VEVENT.VALARM.TRIGGER FROM VEVENT

      (g) SELECT DTSTART,UID FROM VEVENT
            WHERE VTODO.SUMMERY = "Fix typo in CAP"

   Clause (f) is invalid because it contains two '.' characters.

   Clause (g) Is invalid because it mixes VEVENT
   and VTODO properties in the same VQUERY.

   Formal Definition: The value type is defined by the following
   notation:

     cal-query  = "SELECT"   SP   cap-val  SP
                  "FROM"     SP   comp-name SP
                  "WHERE"    SP   cap-expr

                / "SELECT" SP cap-cols SP
                  "FROM"   SP comp-name
                  ;
     cap-val    = cap-cols / param
                / ( cap-val "," cap-val )

                  ; NOTE: there is NO space around the "," on
                  ; the next line
     cap-cols   = cap-col / ( cap-cols "," cap-col)
                  / "*"
                  / "*.*" ; only valid when the target is a "VAGENDA"
                  ;
                  ; A 'cap-col' is:
                  ;
                  ; Any property name ('cap-prop') found in the
                  ; component named in the 'comp-name' used in the

                  ; "FROM" clause.
                  ;
                  ;   SELECT ORGANIZER FROM VEVENT ...
                  ;
                  ; OR
                  ;
                  ; A component name ('comp-name') of an existing
                  ; component contained inside of the 'comp-name'
                  ; used in the "FROM" clause.
                  ;
                  ;   SELECT VALARM FROM VEVENT ...
                  ;
                  ; OR
                  ;
                  ; A component name ('comp-name') of an existing
                  ; component contained inside of the 'comp-name' used
                  ; in the "FROM" clause followed by a property
                  ; name ('cap-prop') to be selected from that
                  ; component.
                  ; (comp-name "." cap-prop)

                  ;   SELECT VALARM.TRIGGER FROM VEVENT ...

     cap-col    = comp-name
                / comp-name "." cap-prop
                / cap-prop

     comp-name  = "VEVENT"  / "VTODO"     / "VJOURNAL" / "VFREEBUSY"
                / "VALARM"  / "DAYLIGHT"  / "STANDARD" / "VAGENDA"
                / "VCAR"    / "VCALSTORE" / "VQUERY"   / "VTIMEZONE"
                / "VRIGHT"  / x-comp    / iana-comp

     cap-prop   = ; A property that may be in the 'cap-comp' named
                  ; in the "SELECT" clause.

     cap-expr   = "(" cap-expr ")"
                / cap-term

     cap-term   = cap-expr SP cap-logical SP cap-expr
                / cap-factor

     cap-logical= "AND" / "OR"

     cap-factor = cap-colval SP cap-oper SP col-value
                / cap-colval SP "LIKE" SP col-value
                / cap-colval SP "NOT LIKE" SP col-value
                / cap-colval SP "IS NULL"
                / cap-colval SP "IS NOT NULL"

                / col-value SP "IN" cap-colval
                / col-value SP "NOT IN" cap-colval
                / "STATE()" "=" ( "BOOKED"
                                 / "UNPROCESSED"
                                 / "DELETED"
                                 / iana-state
                                 / x-state )
                  ;
     iana-state = ; Any state registered by IANA directly or
                  ; included in an RFC that may be applied to
                  ; the component and within the rules published.
                  ;
     x-state    = ; Any experimental state that starts with
                  ; "x-" or "X-".

     cap-colval = cap-col /  param
                  ;
     param      = "PARAM(" cap-col "," cap-param ")"
                  ;
     cap-param  = ; Any parameter that may be contained in the cap-col
                  ; in the supplied PARAM() function

     col-value  = col-literal
                / "SELF()"
                / "CAL-OWNERS()"
                / "CAL-OWNERS(" cal-address ")"
                / "CURRENT-TARGET()"
                   ;
     cal-address = ; A CALID as define by CAP
                   ;
     col-literal = "'" literal-data "'"
                   ;
     literal-data = ; Any data that matches the value type of the
                   ; column that is being compared.  That is, you
                   ; cannot compare PRIORITY to "some string" because
                   ; PRIORITY has a value type of integer.  If it is
                   ; not preceded by the LIKE element, any '%' and '_'
                   ; characters in the literal data are not treated as
                   ; wildcard characters and do not have to be
                   ; backslash-escaped.
                   ;
                   ; OR
                   ;
                   ; If the literal-data is preceded by the LIKE
                   ; element it may also contain the '%' and '_'
                   ; wildcard characters.  And, if the literal data
                   ; that is comparing contains any '%' or '_'
                   ; characters, they MUST be backslash-escaped as

                   ; described in the notes below, in order for them
                   ; not to be treated as wildcard characters.
                   ;
                   ; And, if the literal data contains any characters
                   ; that would have to be backslash-escaped if
                   ; a property or parameter value, then they must
                   ; be backslash-escaped in the literal-data.
                   ; Also, the quote character (') must be backslash
                   ; escaped.  Example:
                   ;
                   ; ... WHERE SUBJECT = 'It\'s time to ski'
                   ;
     cap-oper    = "="
                 / "!="
                 / "<"
                 / ">"
                 / "<="
                 / ">="
                   ;
     SP          = ; A single white space ASCII character
                   ; (value in HEX %x20).
                   ;
     x-comp      = ; As defined in [iCAL] section 4.6.
                   ;
     iana-comp   = ; As defined in [iCAL] section 4.6.

6.1.1.1.  [NOT] CAL-OWNERS()

   This function returns the list of "OWNER" properties for the named
   calendar when used in the "SELECT" clause.

   If called as 'CAL-OWNERS()', it is equivalent to the comma-separated
   list of all of the owners of the calendar that match the provided
   "TARGET" property value.  If the target is a "VCALSTORE", it returns
   the "CALMASTER" property.

   If called as 'CAL-OWNERS(cal-address)', then it is the equivalent to
   the comma-separated list of owners for the named calendar id.  If
   'cal-address' is a CS, it returns the "CALMASTER" property.

   If used in the "WHERE" clause, it returns true if the currently
   authenticated UPN is an owner of the currently selected object
   matched in the provided "TARGET" property.  Used in a CAL-QUERY
   "WHERE" clause and in the UPN-FILTER.

6.1.1.2.  CURRENT-TARGET()

   This is equivalent to the value of the "TARGET" property in the
   current command.  It is used in a CAL-QUERY "WHERE" clause.

6.1.1.3.  PARAM()

   This is used in a CAL-QUERY.  It returns or tests for the value of
   the named parameter from the named property.

6.1.1.3.1.  PARAM() in SELECT

   When used in a "SELECT" clause, it returns the entire property and
   all of that property's parameters; the result is not limited to the
   supplied parameter.  If the property does not contain the named
   parameter, then the property is not returned.  However, it could be
   returned as a result of another "SELECT" clause value.  If multiple
   properties of the supplied name have the named parameter, all
   properties with that named parameter are returned.  If multiple
   PARAM() clauses in a single "SELECT" CLAUSE match the same property,
   then the single matching property is returned only once.

   Also, note that many parameters have default values defined in [iCAL]
   that must be treated as existing with their default value in the
   properties, as defined in [iCAL], even when not explicitly present.
   For example, if a query were performed with PARAM(ATTENDEE,ROLE) then
   ALL "ATTENDEE" properties would match because, even when they do not
   explicitly contain the "ROLE" parameter, it has a default value and
   therefore must match.

   Therefore, when PARAM() is used in a "SELECT" clause, it is more
   accurate to say that it means return the property, if it contains the
   named parameter explicitly in the property or simply because the
   parameter has a default for that property.

6.1.1.3.2.  PARAM() in WHERE

   When PARAM() is used in the "WHERE" clause, a match is true when the
   parameter value matches the compare clause (according to the supplied
   WHERE values).  If multiple named properties contain the named
   parameter, then each parameter value is compared in turn to the
   condition; if any match, the results would be true for that condition
   the same as if only one had existed.  Each matching property or
   component is returned only once.

   Because a parameter may be multi-valued, the comparison might need to
   be done with an "IN" or "NOT IN" comparator.

   Given the following query:

      ATTENDEE;PARTSTAT=ACCEPTED:cap://host.com/joe

      SELECT VEVENT FROM VAGENDA
       WHERE PARAM(ATTENDEE,PARTSTAT) = 'ACCEPTED'

   Thus, all "VEVENT" components that contain one or more "ATTENDEE"
   properties that have a "PARTSTAT" parameter with a "ACCEPTED" value
   would be returned.  Also, each uniquely matching VEVENT would be
   returned only once, no matter how many "ATTENDEE" properties had
   matching roles, in each unique "VEVENT" component.

   Also note that many parameters have default values defined in [iCAL].
   Therefore, if the following query were performed on the "ATTENDEE"
   property in the above example:

      SELECT VEVENT FROM VAGENDA
       WHERE PARAM(ATTENDEE,ROLE) = 'REQ-PARTICIPANT'

   It would return the "ATTENDEE" property shown above because the
   default value for the "ROLE" parameter is "REQ-PARTICIPANT".

6.1.1.4.  SELF()

   Used in a CAL-QUERY "WHERE" clause.  Returns the UPN of the currently
   authenticated UPN or their current UPN as a result of an IDENTIFY
   command.

6.1.1.5.  STATE()

   Returns one of three values, "BOOKED", "UNPROCESSED", or "DELETED"
   depending on the state of the object.  "DELETED" is a component in
   the marked-for-delete state.  Components that have been removed from
   the store are never returned.

   If not specified in a query then both "BOOKED" and "UNPROCESSED" data
   is returned.  Each unique "METHOD" property must be in a separate
   MIME object, per the [iCAL] section 3.2 restriction.

6.1.1.6.  Use of Single Quote

   All literal values are surrounded by single quotes ('), not double
   quotes ("), and not without any quotes.  If the value contains quotes
   or any other ESCAPED-CHAR, they MUST be backslash-escaped as
   described in section 4.3.11 "Text" of [iCAL].  Any "LIKE" clause
   wildcard characters that are part of any literal data that is
   preceded by a "LIKE" clause or "NOT LIKE" clause and is not intended

   to mean wildcard search MUST be escaped as described in note (7)
   below.

6.1.1.7.  Comparing DATE and DATE-TIME Values

   When comparing "DATE-TIME" values to "DATE" values and when comparing
   "DATE" values to "DATE-TIME" values, the result will be true if the
   "DATE" value is on the same day as the "DATE-TIME" value.  They are
   compared in UTC no matter what time zone the data may have been
   stored in.

   Local time event, as described in section 4.2.19 of [iCAL], must be
   considered to be in the CUA default timezone that was supplied by the
   CUA in the "CAPABILITY" exchange.

      VALUE-1             VALUE-2            Compare Results

      20020304            20020304T123456    TRUE
      (in UTC-3)          (in UTC-3)

      20020304            20020304T003456    FALSE
      (in UTC)            (in UTC-4)

      20020304T003456Z    20020205T003456    FALSE
      (in UTC-0)          (in UTC-7)

   When "DATE" values and "DATE-TIME" values are compared with the
   "LIKE" clause, the comparison will be done as if the value is a
   [iCAL] DATE or DATE-TIME string value.

      LIKE '2002%' will match anything in the year 2002.

      LIKE '200201%' will match anything in January 2002.

      LIKE '%T000000' will match anything at midnight.

      LIKE '____01__T%' will match anything for any year or
                    time that is in January.
                    (Four '_', '01', two '_' 'T%').

   Using a "LIKE" clause value of "%00%", would return any value that
   contained two consecutive zeros.

   All comparisons will be done in UTC.

6.1.1.8.  DTEND and DURATION

   The "DTEND" property value is not included in the time occupied by
   the component.  That is, a "DTEND" property value of 20030614T12000
   includes all of the time up to, but not including, noon on that day.

   The "DURATION" property value end time is also not inclusive.  So an
   object with a "DTSTART" property value of 20030514T110000 and a
   "DURATION" property value of "1H" does not include noon on that day.

   When a "QUERY" property value contains a "DTEND" value, then the CS
   MUST also evaluate any existing "DURATION" property value and
   determine if it has an effective end time that matches the "QUERY"
   property supplied "DTEND" value or any range of values supplied by
   the "QUERY" property.

   When a "QUERY" property contains a "DURATION" value, then the CS MUST
   also evaluate any existing "DTEND" property values and determine if
   they have an effective duration that matches the value, or any range
   of values, supplied by the "QUERY" property.

6.1.1.9.  [NOT] LIKE

   The pattern matching characters are the '%' that matches zero or more
   characters, and '_' that matches exactly one character (where
   character does not always mean octet).

   "LIKE" clause pattern matches always cover the entire string.  To
   match a pattern anywhere within a string, the pattern must start and
   end with a percent sign.

   To match a '%' or '_' in the data and not have it interpreted as a
   wildcard character, they MUST be backslash-escaped.  Thus, to search
   for a '%' or '_' in the string:

      LIKE '%\%%'    Matches any string with a '%' in it.
      LIKE '%\_%'    Matches any string with a '_' in it.

   Strings compared using the "LIKE" clause MUST be performed using case
   insensitive comparisoison assumes 'a' = 'A').

   If the "LIKE" clause is preceded by 'NOT' then there is a match when
   the string compare fails.

   Some property values (such as the 'recur' value type), contain commas
   and are not multi-valued.  The CS must understand the objects being
   compared and understand how to determine how any multi-valued or
   multi-instances properties or parameter values are separated, quoted,

   and backslash-escaped.  THE CS must perform the comparisons as if
   each value existed by itself and was not quoted or backslash-escaped,
   when comparing using the LIKE element.

   See related examples in Section 6.1.1.11.

6.1.1.10.  Empty vs. NULL

   When used in a CAL-QUERY value, "NULL" means that the property or
   parameter is not present in the object.  Paramaters that are not
   provided and have a default value in the property are considered to
   exist with their default value and will not be "NULL".

      If the property exists but has no value, then "NULL" MUST NOT
      match.

      If the parameter exists but has no value, then "NULL" MUST NOT
      match.

      If the parameter not present and has a default value, then "NULL"
      MUST NOT match.

      If the property (or parameter) exists but has no value, then it
      matches the empty string '' (quote quote).

6.1.1.11.  [NOT] IN

   This is similar to the "LIKE" clause, except it does value matching
   and not string comparison matches.

   Some iCalendar objects can be multi-instance and multi-valued.  The
   "IN" clause will return a match if the literal value supplied as part
   of the "IN" clause is contained in the value of any instance of the
   named property or parameter, or is in any of the multiple values in
   the named property or parameter.  Unlike the "LIKE" clause, the '%'
   and '_' matching characters are not used with the "IN" clause and
   have no special meaning.

             BEGIN:A-COMPONENT
      (a)      property:value1,value2        One property, two values.
      (b)      property:"value1,value2"      One property, one value.
      (c)      property:parameter=1,2:x      One parameter, two values.
      (d)      property:parameter="1,2",3:y  One parameter, one value.
      (e)      property:parameter=",":z      One parameter, one value.
      (f)      property:x,y,z                One property, three values
             END:A-COMPONENT

   In this example:

      'value1' IN property          would match (a) only.
      'value1,value2' IN property   would match (b) only.
      'value%'  IN property         would NOT match any.
      ',' IN property               would NOT match any.
      '%,%' IN property             would NOT match any.
      'x' IN property               would match (f) and (c).
      '2' IN parameter              would match (c) only.
      '1,2' IN parameter            would match (d) only.
      ',' IN parameter              would match (e) only.
      '%,%' IN parameter            would NOT match any.

      property  LIKE 'value1%'      would match (a) and (b).
      property  LIKE 'value%'       would match (a) and (b).
      property  LIKE 'x'            would match (f) and (c).
      parameter LIKE '1%'           would match (c) and (d).
      parameter LIKE '%2%'          would match (c) and (d).
      parameter LIKE ','            would match (e) only.

   Some property values (such as the "RECUR" value type), contain commas
   and are not multi-valued.  The CS must understand the objects being
   compared and understand how to determine how any multi-valued or
   multi-instance properties or parameter values are separated, quoted,
   and backslash-escaped and perform the comparisons as if each value
   existed by itself and not quoted or backslash-escaped when comparing
   using the IN element.

   If the "IN" clause is preceded by 'NOT', then there is a match when
   the value does not exist in the property or parameter value.

6.1.1.12.  DATE-TIME and TIME Values in a WHERE Clause

   All "DATE-TIME" and "TIME" literal values supplied in a "WHERE"
   clause MUST be terminated with 'Z'.  That means that the CUA MUST
   supply the values in UTC.

   Valid:

      WHERE alarm.TRIGGER < '20020201T000000Z'
      AND alarm.TRIGGER > '20020101T000000Z'

   Not valid; it is a syntax error and the CS MUST reject the QUERY:

      WHERE alarm.TRIGGER < '20020201T000000'
      AND alarm.TRIGGER > '20020101T000000'

6.1.1.13.  Multiple Contained Components

   If a query references a component and a component or property
   contained in the component, any clauses referring to the contained
   component or property must be evaluated on all of the contained
   components or properties.  If any of the contained components or
   properties match the query, and the conditions on the containing
   component are also true, the component matches the query.

   For example, in the query below, if a BOOKED VEVENT contains multiple
   VALARMs, and the VALARM.TRIGGER clause is true for any of the VALARMs
   in the VEVENT, then the UID, SUMMARY, and DESCRIPTION of this VEVENT
   would be included in the QUERY results.

      BEGIN:VQUERY
      EXPAND:TRUE
      QUERY:SELECT UID,SUMMARY,DESCRIPTION FROM VEVENT
      WHERE VALARM.TRIGGER >= '20000101T030405Z'
      AND VALARM.TRIGGER <= '20001231T235959Z'
      AND STATE() = 'BOOKED'
      END:VQUERY

6.1.1.14.  Example, Query by UID

   The following example would match the entire content of a "VEVENT" or
   "VTODO" component with the "UID" property equal to "uid123" , and it
   would not expand any multiple instances of the component.  If the CUA
   does not know  if "uid123" was a "VEVENT", "VTODO", "VJOURNAL", or
   any other component, then all components that the CUA supports MUST
   be supplied in a QUERY property.  This example assumes the CUA is
   only interested in "VTODO" and "VEVENT" components.

   If the results were empty it could also mean that "uid123" was a
   property in a component other than a VTODO or VEVENT.

      BEGIN:VQUERY
      QUERY:SELECT * FROM VTODO WHERE UID = 'uid123'
      QUERY:SELECT * FROM VEVENT WHERE UID = 'uid123'
      END:VQUERY

6.1.1.15.  Query by Date-Time Range

      This query selects the entire content of every booked "VEVENT"
      component that has an instance greater than or equal to July 1,
      2000 00:00:00 UTC and less than or equal to July 30, 2000 23:59:59
      UTC.  This includes single instance "VEVENT" components that do
      not explicitly contain any recurrence properties or "RECURRENCE-
      ID" properties.  This works only for CSs that have the "RECUR-

      EXPAND" property value set to "TRUE" in the "GET-CAPABILITY"
      exchange.

      BEGIN:VQUERY
      EXPAND:TRUE
      QUERY:SELECT * FROM VEVENT
      WHERE RECURRENCE-ID >= '20000701T000000Z'
      AND RECURRENCE-ID <= '20000730T235959Z'
      AND STATE() = 'BOOKED'
      END:VQUERY

6.1.1.16.  Query for All Unprocessed Entries

   The following example selects the entire contents of all non-booked
   "VTODO" and "VEVENT" components in the "UNPROCESSED" state.  The
   default for the "EXPAND" property is "FALSE", so the recurrence rules
   will not be expanded.

      BEGIN:VQUERY
      QUERYID:Fetch VEVENT and VTODO iTIP components
      QUERY:SELECT * FROM VEVENT WHERE STATE() = 'UNPROCESSED'
      QUERY:SELECT * FROM VTODO WHERE STATE() = 'UNPROCESSED'
      END:VQUERY

   The following example fetches all "VEVENT" and "VTODO" components in
   the "BOOKED" state.

      BEGIN:VQUERY
      QUERYID:Fetch All Booked VEVENT and VTODO components
      QUERY:SELECT * FROM VEVENT WHERE STATE() = 'BOOKED'
      QUERY:SELECT * FROM VTODO WHERE STATE() = 'BOOKED'
      END:VQUERY

   The following fetches the "UID" property for all "VEVENT" and "VTODO"
   components that have been marked for delete.

      BEGIN:VQUERY
      QUERYID:Fetch UIDs of marked-for-delete VEVENTs and VTODOs
      QUERY:SELECT UID FROM VEVENT WHERE STATE() = 'DELETED'
      QUERY:SELECT UID FROM VTODO WHERE STATE() = 'DELETED'
      END:VQUERY

6.1.1.17.  Query with Subset of Properties by Date/Time

   In this example, only the named properties will be selected, and all
   booked and non-booked components have a "DTSTART" value from February
   1st to February 10th 2000 (in UTC) will also be selected.

      BEGIN:VQUERY
      QUERY:SELECT UID,DTSTART,DESCRIPTION,SUMMARY FROM VEVENT
      WHERE DTSTART >= '20000201T000000Z'
      AND DTSTART <= '20000210T235959Z'
      END:VQUERY

6.1.1.18.  Query with Components and Alarms in A Range

   This example fetches all booked "VEVENT" components with an alarm
   that triggers within the specified time range.  In this case only the
   "UID", "SUMMARY", and "DESCRIPTION" properties will be selected for
   all booked "VEVENTS" components that have an alarm between the two
   date-times supplied.

      BEGIN:VQUERY
      EXPAND:TRUE
      QUERY:SELECT UID,SUMMARY,DESCRIPTION FROM VEVENT
      WHERE VALARM.TRIGGER >= '20000101T030405Z'
      AND VALARM.TRIGGER <= '20001231T235959Z'
      AND STATE() = 'BOOKED'
      END:VQUERY

6.1.2.  UPN Value Type

   Value Name: UPN

   Purpose: This value type is used to identify values that contain user
      principal name of a CU or a group of CUs.

   Formal Definition: The value type is defined by the following
      notation:

                   ;
         upn        = "@"
                 / [ dot-atom-text ] "@" dot-atom-text
                   ;
                   ; dot-atom-text is defined in RFC 2822 [RFC2822]
                   ;
                   ;
         dot-atom-text = ; As defined in [iCAL].

   Description: This data type is an identifier that denotes a CU or a
      group of CU.  A UPN is an RFC 2822-compliant email address
      [RFC2822], with exceptions listed below, and in most cases it is
      deliverable to the CU.  In some cases it is identical to the CU's
      well known email address.  A CU's UPN MUST never be an e-mail
      address that is deliverable to a different person.  And there is
      no requirement that a person's UPN MUST be their e-mail address.

      A UPN is formatted as a user name followed by "@", followed by a
      Realm in the form of a valid and unique DNS domain name.  The user
      name MUST be unique within the Realm.  In its simplest form it
      looks like "user@example.com".

      In certain cases a UPN will not be RFC 2822-compliant.  When
      anonymous authentication is used, or anonymous authorization is
      being defined, the special UPN "@" will be used.  When
      authentication MUST be used, but unique identity MUST be obscured,
      a UPN of the form @DNS-domain-name may be used.  For example,
      "@example.com".

   Example:

      The following is a UPN for a CU:

         jdoe@example.com

      The following is an example of a UPN that could be for a group of
      CU:

         staff@example.com

      The following is a UPN for an anonymous CU that belongs to a
      specific realm.  When used as a UPN-FILTER, it applies to all UPNs
      in a specific realm:

         @example.com

      The following is a UPN for an anonymous CU:

         @

6.1.3.  UPN-FILTER Value

   Value Name: UPN-FILTER

   Purpose: This value type is used to identify values that contain a
      user principal name filter.

   Formal Definition: The value type is defined by the following
      notation:

                      ;
                      ; NOTE: "CAL-OWNERS(cal-address)"
                      ;       and "NOT CAL-OWNERS(cal-address)"
                      ;       are both NOT allowed below.
                      ;

         upn-filter    = "CAL-OWNERS()" /
                         "NOT CAL-OWNERS()" /
                         "*" /
                   [ "*" / dot-atom-text ] "@" ( "*" / dot-atom-text )
                      ;
                      ; dot-atom-text is defined in RFC 2822

   Description: The value is used to match user principal names (UPNs).
   For "CAL-OWNERS()" and "NOT CAL-OWNERS()", see Section 8.24.

      *           Matches all UPNs.

      @           Matches the UPN of anonymous CUs
                  belonging to the null realm

      @*          Matches the UPN of anonymous CUs
                  belonging to any non-null realm

      @realm      Matches the UPN of anonymous CUs
                  belonging to the specified realm.

      *@*         Matches the UPN of non-anonymous CUs
                  belonging to any non-null realm

      *@realm     Matches the UPN of non-anonymous CUs
                  belonging to the specified realm

      user@realm  Matches the UPN of the specified CU
                  belonging to the specified realm

      user@*      Not allowed.

      user@       Not allowed.

   Example: The following are examples of this value type:

      DENY:NON CAL-OWNERS()
      DENY:@hackers.example.com
      DENY:*@hackers.example.com
      GRANT:sam@example.com

7.  New Parameters

7.1.  ACTION Parameter

   Parameter Name: ACTION

   Purpose: This parameter indicates the action to be taken when a
      timeout occurs.

   Value Type: TEXT

   Conformance: This property can be specified in the "CMD" property.

      When present in a "CMD" property, the "ACTION" parameter specifies
      the action to be taken when the command timeout expires.

   Formal Definition: The parameter is defined by the following
      notation:

         action-param     = ";" "ACTION" "=" ( "ASK" / "ABORT" )
                             ; If 'action-param' is supplied then
                             ; 'latency-param' MUST be supplied.

   Example:

         CMD;LATENCY=10;ACTION=ASK:CREATE

7.2.  ENABLE Parameter

   Parameter Name: ENABLE

   Purpose: This parameter indicates whether or not the property should
      be ignored.  For example, it can indicate that a "TRIGGER"
      property in a "VALARM" component should be ignored.

   Value Type: BOOLEAN

   Conformance: This property can be specified in the "TRIGGER"
      properties.

   Description: When a non owner sends an [iTIP] "REQUEST" to a calendar
      that object might contain a "VALARM" component.  The owner may
      wish to have local control over their own CUA and when or how
      alarms are triggered.

      A CUA may add the "ENABLE" parameter to any "TRIGGER" property
      before booking the component.  If the "ENABLE" parameter is set to
      "FALSE", then the alarm will be ignored by the CUA.  If set to

      "TRUE", or if the "ENABLE" property is not in the "TRIGGER"
      property, the alarm is enabled.  This parameter may not be known
      by pre-CAP implementations, but this should not be an issue as it
      conforms to an 'ianaparam' [iCAL].

   Formal Definition: The property is defined by the following notation:

         enable-param       = "ENABLE" "=" boolean
                              ;
         boolean            = ; As defined in [iCAL].

   Example: The following is an example of this property for a "VAGENDA"
      component:

         TRIGGER;ENABLE=FALSE;RELATED=END:PT5M

7.3.  ID Parameter

   Parameter Name: ID

   Purpose: When used in a "CMD" component, it provides a unique
      identifier.

   Value Type: TEXT

   Conformance: This parameter can be specified in the "CMD" property.

   Description: If more than one command is sent, then the "ID"
      parameter is used to uniquely identify the command.

      A CUA may add the "ID" parameter to any "CMD" property before
      sending the command.  There must not be more than one outstanding
      command tagged with the same "ID" parameter value.

   Formal Definition: The property is defined by the following notation:

         id-param         = ";" "ID" "=" unique-id
                          ; The text value supplied is a unique value
                          ; shared between the CUA and CS to uniquely
                          ; identify the instance of command in the
                          ; the current CUA session.  The value has
                          ; no meaning to other CUAs or other sessions.
                          ;
         unique-id        = ; text
                          ;
         text             = ; As defined in [iCAL].

      Example: The following is an example of this parameter component:

         CMD;UD=some-unique-value:CREATE

7.4.  LATENCY Parameter

   Parameter Name: LATENCY

   Purpose: This parameter indicates time in seconds for when a timeout
      occurs.

   Value Type: TEXT

   Conformance: This property can be specified in the "CMD" property.

   When present in a "CMD" property, the "LATENCY" parameter specifies
      the time in seconds when the command timeout expires.

   Formal Definition: The parameter is defined by the following
      notation:

         latency-param    = ";" "LATENCY" "=" latency-sec
                          ; The value supplied in the time in seconds.
                          ; If 'latency-param' is supplied then
                          ; 'action-param' MUST be supplied.
                          ;
         latency-sec      = posint1

                          ; Default is zero (0) meaning no timeout.

   Example: The following is an example of this parameter:

         CMD;LATENCY=10;ACTION=ASK:CREATE

7.5.  LOCAL Parameter

   Parameter Name: LOCAL

   Purpose: Indicates if the named component should be exported to any
      non-organizer calendar.

   Value Type: BOOLEAN

   Conformance: This parameter can be specified in the "SEQUENCE"
      properties in a "VALARM" component.

   Description: When a non-owner sends an [iTIP] "REQUEST" to a calendar
      that object might contain a "VALARM" component.  The owner may
      wish to have local control over their own CUA and when or how
      alarms are triggered.

      A CUA may add the "LOCAL" parameter to the "SEQUENCE" property
      before booking the component.  If the "LOCAL" parameter is set to
      "TRUE", then the alarm MUST NOT be forwarded to any other
      calendar.  If set to "FALSE", or if the "LOCAL" parameter is not
      in the "SEQUENCE" property, the alarm is global.

   Formal Definition: The property is defined by the following notation:

         local-param        = "LOCAL" "=" boolean

      Example: The following is an example of this parameter:

         SEQUENCE;LOCAL=TRUE:4

7.6.  LOCALIZE Parameter

   Parameter Name: LOCALIZE

   Purpose: If provided, specifies the desired language for error and
      warning messages.

   Value Type: TEXT

   Conformance: This parameter can be specified in the "CMD" properties.

      When the "LOCALIZE" parameter is supplied, its value MUST be one
      of the values listed in the initial [BEEP] greeting 'localize'
      attribute.

      A CUA may add the "LOCALIZE" parameter to the "CMD" property to
      specify the language of any error or warning messages.

   Formal Definition: The property is defined by the following notation:

         localize-param   = ";" "LOCALIZE" "=" beep-localize
                          ;
         beep-localize    = text ; As defined in [BEEP]
                          ; The value supplied MUST be one value from
                          ; the initial [BEEP] greeting 'localize'
                          ; attribute, specifying the locale to use
                          ; for error messages during
                          ; this instance of the command.

   Example: The following is an example of this parameter:

         CMD;LOCALIZE=fr_CA:CREATE

7.7.  OPTIONS Parameter

   Parameter Name: OPTIONS

   Purpose: If provided the "OPTIONS" parameter specifies some "CMD"
      property-specific options.

   Value Type: TEXT

   Conformance: This parameter can be specified in the "CMD" properties.

      A CUA adds the "OPTIONS" parameter to the "CMD" property when the
      command needs extra values.

   Formal Definition: The property is defined by the following notation:

         option-param     = ";" "OPTIONS" "=" cmd-specific
                            ;
         cmd-specific     = ; The value supplied is dependent on the
                            ; CMD value.  See the specific CMDs for the
                            ; correct values to use for each CMD.

   Example: The following is an example of this parameter:

         CMD;OPTIONS=10:GENERATE-UID

8.  New Properties

8.1.  ALLOW-CONFLICT Property

   Property Name: ALLOW-CONFLICT

   Purpose: This property indicates whether or not the calendar and CS
      supports component conflicts.  That is, whether or not any of the
      components in the calendar can overlap.

   Value Type: BOOLEAN

   Property Parameters: Non-standard property parameters can be
      specified on this property.

   Conformance: This property can be specified in "VAGENDA" and
      "VCALSTORE" component.

   Description: This property is used to indicate whether components may
      conflict, that is, whether their expanded instances may share the
      same time or overlap the same time periods.  If it has a value of

      "TRUE", then conflicts are allowed.  If "FALSE", the no two
      components may conflict.

      If "FALSE" in the "VCALSTORE" component, then all "VAGENDA"
      component "ALLOW-CONFLICT" property values MUST be "FALSE" in the
      CS.

   Formal Definition: The property is defined by the following notation:

         allow-conflict     = "ALLOW-CONFLICT" other-params ":" boolean
      CRLF

   Example: The following is an example of this property for a "VAGENDA"
      component:

         ALLOW-CONFLICT:FALSE

8.2.  ATT-COUNTER Property

   Property Name: ATT-COUNTER

   Property Parameters: Non-standard property parameters can be
      specified on this property.

   Conformance: This property MUST be specified in an iCalendar object
      that specifies a counter proposal to a group-scheduled calendar
      entity.  When storing a "METHOD" property with the "COUNTER"
      method, there needs to be a way to remember who sent the COUNTER.
      The ATT-COUNTER property MUST be added to all "COUNTER" [iTIP]
      components by the CUA before storing in a CS.

   Description: This property is used to identify the CAL-ADDRESS of the
      entity that sent the "COUNTER" [iTIP] object.

   Formal Definition: The property is defined by the following notation:

         attcounter   = "ATT-COUNTER" other-params ":" cal-address CRLF

   Examples:

            ATT-COUNTER:cap:example.com/Doug
            ATT-COUNTER:mailto:Doug@Example.com

8.3.  CALID Property

   Property Name: CALID

   Property Parameters: Non-standard property parameters can be
      specified on this property.

   Conformance: This property can be specified in the "VAGENDA"
      component.

   Description: This property is used to specify a fully-qualified
      CALID.

   Formal Definition: The property is defined by the following notation:

         calid   = "CALID" other-params ":" relcalid CRLF

   Example:

         CALID:cap://cal.example.com/sdfifgty4321

8.4.  CALMASTER Property

   Property Name: CALMASTER

   Purpose: The property specifies an e-mail address of a person
   responsible for the calendar store.

   Value Type: URI

   Property Parameters: Non-standard property parameters can be
   specified on this property.

   Conformance: The property can be specified in a "VCALSTORE"
   component.

   Description: The parameter value SHOULD be a MAILTO URI as defined in
   [URL].  It MUST be a contact URI such as a MAILTO URI and not a home
   page or file URI that describes how to contact the calmasters.

   Formal Definition: The property is defined by the following notation:

      calmaster = "CALMASTER" other-params ":" uri CRLF
                ;
      uri       = ; IANA registered uri as defined in [iCAL].

   Example: The following is an example of this property:

         CALMASTER:mailto:administrator@example.com

8.5.  CAP-VERSION Property

   Property Name: CAP-VERSION

   Purpose: This property specifies the version of CAP supported.

   Value Type: TEXT

   Property Parameters: Non-standard property parameters can be
      specified on this property.

   Conformance: This property is specified in the "VREPLY" component
      that is sent in response to a "GET-CAPABILITY" command.

   Description: This specifies the version of CAP that the endpoint
      supports.  The list is a comma-separated list of supported RFC
      numbers.  The list MUST contain at least 4324.

   Formal Definition: The property is defined by the following notation:

         cap-version   = "CAP-VERSION" other-params ":" text CRLF

   Example: The following are examples of this property:

         CAP-VERSION:4324

8.6.  CARID Property

   Property Name: CARID

   Purpose: This property specifies the identifier for an access right
      component.

   Value Type: TEXT

   Property Parameters: Non-standard property parameters can be
      specified on this property.

   Conformance: This property MUST be specified once in a "VCAR"
      component.

   Description: This property is used in the "VCAR" component to specify
      an identifier.  A "CARID" property value is unique per container.

   Formal Definition: The property is defined by the following notation:

         carid      = "CARID" other-params ":" text CRLF

   Example: The following are examples of this property:

         CARID:xyzzy-007
         CARID:User Rights

8.7.  CAR-LEVEL Property

   Property Name: CAR-LEVEL

   Purpose: The property specifies the level of VCAR supported.

   Value Type: TEXT

   Property Parameters: Non-standard property parameters can be
      specified on this property.

   Conformance: The property can be specified in a "VREPLY" component
      that is sent in response to a "GET-CAPABILITY" command.

   Description: The value is one from a list of "CAR-NONE", "CAR-MIN",
      or "CAR-FULL-1".  If "CAR-FULL-1" is supplied, then "CAR-MIN" is
      also available.  A "CAR-MIN" implementation only supported the
      "DEFAULT-VCARS" property values listed in the "VCALSTORE"
      component, and a "CAR-MIN" implementation does not support the
      creation or modification of "VCAR" components from the CUA.

   Formal Definition: The property is defined by the following notation:

         car-level        = "CAR-LEVEL" ":" other-params ":"
                                                car-level-values

         car-level-values = ( "CAR-NONE" / "CAR-MIN" / "CAR-FULL-1"
                              / other-levels )

         other-levels     = ; Any name published in an RFC for a
                            ; "CAR-LEVEL" property value.

   Example: The following is an example of this property:

            CAR-LEVEL:CAR-FULL-1

8.8.  COMPONENTS Property

   Property Name: COMPONENTS

   Purpose: The property specifies a the list of components supported by
      the endpoint.

   Value Type: TEXT

   Property Parameters: Non-standard property parameters can be
      specified on this property.

   Conformance: The property can be specified in a "VREPLY" component in
      response to a "GET-CAPABILITY" command.

   Description: A comma-separated list of components that are supported
      by the endpoint.  A component that is not in the list sent from
      the endpoint is not supported by that endpoint.  Sending an
      unsupported component results in unpredictable results.  This
      includes any components inside of other components (VALARM for
      example).  The recommended list is
      "VCALSTORE,VCALENDAR,VREPLY,VAGENDA,
      VEVENT,VALARM,VTIMEZONE,VJOURNAL,VTODO,VALARM,
      DAYLIGHT,STANDARD,VCAR,VRIGHT,VQUERY".

   Formal Definition: The property is defined by the following notation:

      components     = "COMPONENTS" other-params ":" comp-list CRLF
                     ;
                     ; All of these MUST be supplied only once.
                     ;
      comp-list-req  = "VCALSTORE" "," "VCALENDAR" "," "VTIMEZONE" ","
                       "VREPLY"    "," "VAGENDA"   "," "STANDARD"  ","
                       "DAYLIGHT"
                     ; At least one MUST be supplied. The same value
                     ; MUST NOT occur more than once.
                     ;
      comp-list-min  = ( "," "VEVENT")
                     / ( "," "VTODO")
                     / ( "," "VJOURNAL" )
                     ; The same value MUST NOT occur
                     ; more than once.  If "VCAR" is supplied then
                     ; "VRIGHT" must be supplied.
                     ;
      comp-list-opt  = ( "," "VFREEBUSY" ) / ( "," "VALARM" )
                       / ( "," "VCAR" )    / ( "," "VRIGHT" )
                       / ( "," "VQUERY")   / ( "," x-comp )
                       / ( "," iana-comp )
                     ;
      comp-list      = comp-list-req 1*3comp-list-min *(comp-list-opt)

   Example: The following is an example of this property:

         COMPONENTS:VCALSTORE,VCALENDAR,VREPLY,VAGENDA,
         VEVENT,VALARM,VTIMEZONE,VJOURNAL,VTODO,
         DAYLIGHT,STANDARD,VFREEBUSY,VCAR,VRIGHT,VQUERY

8.9.  CSID Property

   Property Name: CSID

   Purpose: The property specifies a globally unique identifier for the
      calendar store.

   Value Type: URI

   Property Parameters: Non-standard property parameters can be
      specified on this property.

   Conformance: The property can be specified in a "VCALSTORE"
      component.

   Description: The identifier MUST be globally unique.  Each CS needs
      its own unique identifier.  The "CSID" property is the official
      unique identifier for the CS.  If the BEEP 'serverName' attribute
      was supplied in the BEEP 'start' message, then the CSID will be
      mapped to the virtual host name supplied, and the host name part
      of the CSID MUST be the same as the 'serverName' value.  This
      allows one CS implementation to service multiple virtual hosts.
      CS's are not required to support virtual hosting.  If a CS does
      not support virtual hosting, then it must ignore the BEEP
      'serverName' attribute.

   Formal Definition: The property is defined by the following notation:

         csid = "CSID" other-params ":" capurl CRLF

   Example: The following is an example of this property:

         CSID:cap://calendar.example.com

8.10.  DECREED Property

   Property Name: DECREED

   Purpose: This property specifies if an access right calendar
      component is decreed or not.

   Value Type: BOOLEAN

   Property Parameters: Non-standard property parameters can be
      specified on this property.

   Conformance: This property MAY be specified once in a "VCAR"
      component.

   Description: This property is used in the "VCAR" component to specify
      whether the component is decreed or not.  If the "DECREED"
      property value is "TRUE" then the CUA will be unable to change the
      contents of the "VCAR" component and any attempt will fail with an
      error.

   Formal Definition: The property is defined by the following notation:

         decreed      = "DECREED" other-params ":" boolean CRLF

   Example: The following is an example of this property:

         DECREED:TRUE

8.11.  DEFAULT-CHARSET Property

   Property Name: DEFAULT-CHARSET

   Purpose: This property indicates the default charset.

   Value Type: TEXT

   Property Parameters: Non-standard property parameters can be
      specified on this property.

   Conformance: This property can be specified in "VAGENDA" and
      "VCALSTORE" calendar component.

   Description: In a "VAGENDA" component this property is used to
      indicate the charset of calendar.  If not specified, the default
      is the first value in the "VCALSTORE" components "DEFAULT-CHARSET"
      property value list.  The value MUST be an IANA registered
      character set as defined in [CHARREG].

   In a "VCALSTORE" component it is a comma-separated list of charsets
      supported by the CS.  The first entry is the default entry for all
      newly created "VAGENDA" components.  The "UTF-8" value MUST be in
      the "VCALSTORE" component "DEFAULT-CHARSET" property list.  All
      compliant

      CAP implementations (CS and CUA) MUST support at least the "UTF-8"
      charset.

      If a charset name contains a comma (,), that comma must be
      backslash-escaped in the value.

   Formal Definition: The property is defined by the following notation:

         default-charset     = "DEFAULT-CHARSET" other-params ":" text
         *( "," text) CRLF

   Example: The following is an example of this property for a "VAGENDA"
   component:

      DEFAULT-CHARSET:Shift_JIS,UTF-8

8.12.  DEFAULT-LOCALE Property

   Property Name: DEFAULT-LOCALE

   Purpose: This property specifies the default language for text
      values.

   Value Type: TEXT

   Property Parameters: Non-standard property parameters can be
      specified on this property.

   Conformance: This property can be specified in "VAGENDA" and
      "VCALSTORE" components.

   Description: In a "VAGENDA" component, the "DEFAULT-LOCALE" property
      is used to indicate the locale of the calendar.  The full locale
      SHOULD be used.  The default and minimum locale is POSIX (aka the
      'C' locale).

      In a "VCALSTORE" component, it is a comma-separated list of
      locales supported by the CS.  The first value in the list is the
      default for all newly created VAGENDAs.  "POSIX" MUST be in the
      list.

   Formal Definition: The property is defined by the following notation:

         default-locale     = "DEFAULT-LOCALE" other-params ":" language
                               *( "," language) CRLF
                    ;
         language = ; Text identifying a locale, as defined in [CHARPOL]

   Example: The following is an example of this property:

      DEFAULT-LOCALE:en-US.iso-8859-1,POSIX

8.13.  DEFAULT-TZID Property

   Property Name: DEFAULT-TZID

   Purpose: This property specifies the text value that specifies the
      time zones.

   Value Type: TEXT

   Property Parameters: Non-standard property parameters can be
      specified on this property.

   Conformance: This property may be specified once in a "VAGENDA" and
      "VCALSTORE" components.

   Description: A multi-valued property that lists the known time zones.
      The first is the default.  Here "TZID" property values are the
      same as the "TZID" property defined in [iCAL].

      If used in a "VCALSTORE" component, it is a comma-separated list
      of TZIDs known to the CS.  The entry is used as the default TZID
      list for all newly created calendars.  The list MUST contain at
      least "UTC".  A "VCALSTORE" components MUST contain one
      "VTIMEZONE" component for each value in the "DEFAULT-TZID"
      property value.

      If used in a "VAGENDA" component, it is a comma-separated list of
      "TZID" property values naming the time zones known to the
      calendar.  The first time zone in the list is the default and is
      used as the localtime for objects that contain a date or date-time
      value without a time zone.  All "VAGENDA" components MUST have one
      "VTIMEZONE" component contained for each value in the "DEFAULT-
      TZID" property value.

      If a "TZID" property value contains a comma (,), the comma must be
      backslash-escaped.

   Formal Definition: This property is defined by the following
      notation:

         default-tzid       = "DEFAULT-TZID" other-params
                              ":" [tzidprefix] text
                              *("," [tzidprefix] text) CRLF
                              ;
         txidprefix         = ; As defined in [iCAL].

   Example: The following is an example of this property:

      DEFAULT-TZID:US/Mountain,UTC

8.14.  DEFAULT-VCARS Property

   Property Name: DEFAULT-VCARS

   Purpose: This property is used to specify the "CARID" property ids of
      the default "VCAR" components for newly created "VAGENDA"
      components.

   Value Type: TEXT

   Property Parameters: Non-standard property parameters can be
      specified on this property.

   Conformance: This property MUST be specified in "VCALSTORE" calendar
      component and MUST at least specify the following values:
      "READBUSYTIMEINFO", "REQUESTONLY", "UPDATEPARTSTATUS", and
      "DEFAULTOWNER".

   Description: This property is used in the "VCALSTORE" component to
      specify the "CARID" value of the "VCAR" components that MUST be
      copied into now "VAGENDA" components at creation time by the CS.
      All "DEFAULT-VCAR" values must have "VCARS" components stored in
      the "VCALSTORE".

   Formal Definition: The property is defined by the following notation:

         defautl-vcars      = "DEFAULT-VCARS" other-params ":" text
         *( "," text ) CRLF

   Example: The following is an example of this property:

         DEFAULT-VCARS:READBUSYTIMEINFO,REQUESTONLY,
          UPDATEPARTSTATUS,DEFAULTOWNER

8.15.  DENY Property

   Property Name: DENY

   Purpose: This property identifies the UPN(s) being denied access in
      the "VRIGHT" component.

   Value Type: UPN-FILTER

   Property Parameters: Non-standard property parameters can be
      specified on this property.

   Conformance: This property can be specified in "VRIGHT" components.

   Description: This property is used in the "VRIGHT" component to
      define the CU or UG being denied access.

   Formal Definition: The property is defined by the following notation:

         deny       = "DENY" other-params ":" upn-filter CRLF

   Example: The following are examples of this property:

         DENY:*

         DENY:bob@example.com

8.16.  EXPAND property

   Property Name: EXPAND

   Purpose: This property is used to notify the CS whether to expand any
      component with recurrence rules into multiple instances, in a
      query reply.

   Value Type: BOOLEAN

   Property Parameters: Non-standard property parameters can be
      specified on this property.

   Conformance: This property can be specified in "VQUERY" components.

   Description: If a CUA wishes to see all of the instances of a
      recurring component, the CUA sets EXPAND=TRUE in the "VQUERY"
      component.  If not specified, the default is "FALSE".  Note that
      if the CS has its "RECUR-EXPAND" CS property value set to "FALSE",
      then the "EXPAND" property will be ignored and the result will be
      as if the "EXPAND" value was set to "FALSE".  The results will be
      bounded by any date range or other limits in the query.

   Formal Definition: The property is defined by the following notation:

         expand     = "EXPAND" other-params ":" ("TRUE" / "FALSE") CRLF

   Example: The following are examples of this property:

         EXPAND:FALSE
         EXPAND:TRUE

8.17.  GRANT Property

   Property Name: GRANT

   Purpose: This property identifies the UPN(s) being granted access in
      the "VRIGHT" component.

   Value Type: UPN-FILTER

   Property Parameters: Non-standard property parameters can be
      specified on this property.

   Conformance: This property can be specified in "VRIGHT" calendar
      components.

   Description: This property is used in the "VRIGHT" component to
      specify the CU or UG being granted access.

   Formal Definition: The property is defined by the following notation:

         grant     = "GRANT" other-params ":" upn-filter CRLF

   Example: The following are examples of this property:

         GRANT:*

         GRANT:bob@example.com

8.18.  ITIP-VERSION Property

   Property Name: ITIP-VERSION

   Purpose: This property specifies the version of ITIP supported.

   Value Type: TEXT

   Property Parameters: Non-standard property parameters can be
      specified on this property.

   Conformance: This property is specified in the "VREPLY" component
      that is sent in response to a "GET-CAPABILITY" command.

   Description: This specifies the version of ITIP that the endpoint
      supports.  The list is a comma-separated list of supported RFC
      numbers.  The list MUST contain at least 2446, which is [iTIP]

   Formal Definition: The property is defined by the following notation:

         itip-version   = "ITIP-VERSION" other-params ":" text CRLF

   Example: The following are examples of this property:

         ITIP-VERSION:2446

8.19.  MAX-COMP-SIZE Property

   Property Name: MAX-COMP-SIZE

   Purpose: This property specifies the largest size of any object
      accepted.

   Value Type: TEXT

   Property Parameters: Non-standard property parameters can be
      specified on this property.

   Conformance: This property is specified in the "VREPLY" component
      that is sent in response to a "GET-CAPABILITY" command.

   Description: A positive integer value that specifies the size of the
      largest iCalendar object that can be accepted in octets.  Objects
      larger than this will be rejected.  A value of zero (0) means no
      limit.  This is also the maximum value of any [BEEP] payload that
      will be accepted or sent.

   Formal Definition: The property is defined by the following notation:

         max-comp-size   = "MAX-COMP-SIZE" other-params ":" posint0 CRLF

   Example: The following are examples of this property:

         MAX-COMP-SIZE:1024

8.20.  MAXDATE Property

   Property Name: MAXDATE

   Purpose: This property specifies the date/time in the future, beyond
      which the CS or CUA cannot represent.

   Value Type: DATE-TIME

   Property Parameters: Non-standard property parameters can be
      specified on this property.

   Conformance: The property can be specified in the "VCALSTORE"
      component.

   Description: The date and time MUST be a UTC value and end with 'Z'.

   Formal Definition: The property is defined by the following notation:

         maxdate    = "MAXDATE" other-params ":" date-time CRLF

   Example: The following is an example of this property:

         MAXDATE:20990101T000000Z

8.21.  MINDATE Property

   Property Name: MINDATE

   Purpose: This property