Home | Contact Us | FAQ | Search & Site Map | Link to Us
Sign In | Join | Other 45 Sites in Network
Home
DiscussionsAccessExcelInfoPathOutlookPowerPointPublisherWord
DirectoryUser Groups
Related Topics
Outlook ExpressInternet ExplorerWindowsMS Server ProductsMore Topics ...

MS Office Forum / Outlook / Calendaring / August 2006

Tip: Looking for answers? Try searching our database.

security - private calendar entries

Thread view: 
Enable EMail Alerts  Start New Thread
Thread rating: 
evee1 - 10 Aug 2006 10:59 GMT
if a user opens another user's calendar for which he has been given delegate
rights and exports the calendar folder in Outlook 2003, private entries are
visible in the exported calendar file. This problem is considered to be a
security risk by a customer of mine.
Is there a solution for this problem? e.g. preventing the user from
exporting the calendar folder through policies??

thanks for your help.
Sue Mosher [MVP-Outlook] - 11 Aug 2006 02:06 GMT
No, and no. Did the folder owner grant the delegate access to private items?
Signature

Sue Mosher, Outlook MVP
  Author of Configuring Microsoft Outlook 2003
    http://www.turtleflock.com/olconfig/index.htm
  and Microsoft Outlook Programming - Jumpstart for
    Administrators, Power Users, and Developers
    http://www.outlookcode.com/jumpstart.aspx
 

> if a user opens another user's calendar for which he has been given delegate
> rights and exports the calendar folder in Outlook 2003, private entries are
[quoted text clipped - 4 lines]
>
> thanks for your help.
evee1 - 15 Aug 2006 08:29 GMT
Hi Sue, thanks for replying to my post. Let me be more specific:

1. User A (folder owner) grants reviewer permissions (read access) on all
folders of his mailbox for user B

2. in OL2003 user B opens user A's mailbox; when she opens user A's calendar
she can read all the calendar entries except those which have been marked
private by
user A as it should be

3. in OL2003 user B exports user A's mailbox and saves it as a *.pst file.
When she opens the exported *.pst file also the private entries in user A's
calendar are visible and can be read by user B

Why is that? And is there a way to avoid it.

Thanks and kind regards,
Eveline

> No, and no. Did the folder owner grant the delegate access to private items?
> > if a user opens another user's calendar for which he has been given delegate
[quoted text clipped - 5 lines]
> >
> > thanks for your help.
Sue Mosher [MVP-Outlook] - 15 Aug 2006 15:10 GMT
Looks like you've found an interesting bug. It's fixed in Outlook 2007.

Maybe the delegate doesn't need access to the entire mailbox? If the user can only open the calendar with the File | Open | Other User's Folder command, they won't be able to export that folder.

Signature

Sue Mosher, Outlook MVP
  Author of Configuring Microsoft Outlook 2003
    http://www.turtleflock.com/olconfig/index.htm
  and Microsoft Outlook Programming - Jumpstart for
    Administrators, Power Users, and Developers
    http://www.outlookcode.com/jumpstart.aspx
 

> Hi Sue, thanks for replying to my post. Let me be more specific:
>
[quoted text clipped - 16 lines]
>
>> No, and no. Did the folder owner grant the delegate access to private items?

>> > if a user opens another user's calendar for which he has been given delegate
>> > rights and exports the calendar folder in Outlook 2003, private entries are
[quoted text clipped - 4 lines]
>> >
>> > thanks for your help.
evee1 - 15 Aug 2006 16:00 GMT
thank you very much for that clear statement.
I will test OL2007.
The workaround you mentioned seems a possible solution to me.
I informed my customer and he is quite satisfied with this.

kind regards,
Eveline

> Looks like you've found an interesting bug. It's fixed in Outlook 2007.
>
[quoted text clipped - 29 lines]
> >> >
> >> > thanks for your help.

Rate this thread:






 
Sign In
Join
My Latest Posts
My Monitored Threads
My Blog
My Photo Gallery
My Profile
My Homepage

Start New Thread
Enable EMail Alerts
Rate this Thread



©2008 Advenet LLC   Privacy Policy - Terms of Use
This website includes both content owned or controlled by Advenet as well as content owned or controlled by third parties.