Microsoft KB Archive/311738

= OL: Developer Information About the Outlook View Control Security Update =

Article ID: 311738

Article Last Modified on 2/26/2004

-

APPLIES TO


 * Microsoft Outlook 2000 Standard Edition
 * Microsoft Outlook 2002 Standard Edition

-



This article was previously published under Q311738



SUMMARY
Microsoft has released two Outlook View Control Security Updates to restrict how the Outlook 2000 and Outlook 20002 View Controls behave when they are used in a Web browser. This article describes the changes that were made to the controls.



MORE INFORMATION
The updated versions of the Outlook View Controls provide a variety of changes when the controls are used in a Web browser. Some of the changes ensure that a user's data cannot be changed; other changes were made so that the control cannot make it appear that data has been changed.

The documentation for the Outlook 2002 View Control is provided from the following Microsoft Web site:

http://www.microsoft.com/downloads/release.asp?ReleaseID=32464

Use the information in this article to supplement the Help file. Note that some of the properties and methods that are mentioned in this article may not apply to Outlook 2000 because some properties and methods were added to the Outlook 2002 version of the control.

Version Restrictions
Earlier versions of the controls provide some functionality if they are installed on a computer that is running an earlier version of Outlook. The updated controls only function if they are installed on a computer that is running the appropriate version of Outlook.

Updated Behavior for Properties
The following properties are restricted if you use the control in a Web browser:
 * Filter: Read-only
 * FilterAppend: Read-only
 * Restriction: Read-only
 * Selection: Does not function
 * View: Read-only

NOTE: The following properties have not been changed: ActiveFolder, DeferUpdate, EnableRowPersistance, Folder, ItemCount, NameSpace, OutlookApplication, and ViewXML.

Updated Behavior for Methods
The following methods do not function if you use the control in a Web browser:
 * AddToPublicFolderFavorites
 * CollapseAllGroups
 * CollapseGroup
 * ExpandAllGroups
 * ExpandGroup
 * Delete
 * MarkAllAsRead
 * MarkAsRead
 * MarkAsUnread
 * MoveItem
 * SendAndReceive
 * SynchFolder

NOTE: The following methods have not been changed: AddressBook, AdvancedFind, Categories, CustomizeView, FlagItem, ForceUpdate, Forward, GotoToday, GoToDate, GroupBy, NewAppointment, NewContact, NewDefaultItem, NewDistributionList, NewJournalEntry, NewMeetingRequest, NewMessage, NewNote, NewPost, NewTask, NewTaskRequest, NewForm, NewOfficeDocument, Open, OpenSharedDefaultFolder, Reply, ReplyAll, ReplyInFolder, PrintItem, SaveAs, ShowFields, and Sort.

Event Behavior
All events behave as previously documented.

Behavior Changes When You Use an Object Tag in a Web Browser
One side effect of the updated version of the controls occurs if you use the control in an HTML page and also use the  tag to set the View property; all of the other properties that you specify are not applied. A typical symptom that can occur after you use the updated Outlook View Control is that the control displays the Inbox, even though you specify a different folder parameter. To work around this behavior, you can either:
 * Use an Object tag to set the control's properties, but completely remove the View parameter so that it does not affect the other parameters. -or-


 * Instead of using an Object tag to set the properties, use a scripting language to programmatically set the properties.

