OL: Developer Information About the Outlook View Control Security Update

Microsoft has released two Outlook View Control Security Updates to restrict how the Outlook 2000 and Outlook 20002 View Controls behave when they are used in a Web browser. This article describes the changes that were made to the controls.

The updated versions of the Outlook View Controls provide a variety of changes when the controls are used in a Web browser. Some of the changes ensure that a user's data cannot be changed; other changes were made so that the control cannot make it appear that data has been changed.

The documentation for the Outlook 2002 View Control is provided from the following Microsoft Web site: Use the information in this article to supplement the Help file. Note that some of the properties and methods that are mentioned in this article may not apply to Outlook 2000 because some properties and methods were added to the Outlook 2002 version of the control.

Version Restrictions

Earlier versions of the controls provide some functionality if they are installed on a computer that is running an earlier version of Outlook. The updated controls only function if they are installed on a computer that is running the appropriate version of Outlook.

Updated Behavior for Properties

The following properties are restricted if you use the control in a Web browser:

• Filter: Read-only
• FilterAppend: Read-only
• Restriction: Read-only
• Selection: Does not function
• View: Read-only

NOTE: The following properties have not been changed: ActiveFolder, DeferUpdate, EnableRowPersistance, Folder, ItemCount, NameSpace, OutlookApplication, and ViewXML.

Updated Behavior for Methods

The following methods do not function if you use the control in a Web browser:

• AddToPublicFolderFavorites
• CollapseAllGroups
• CollapseGroup
• ExpandAllGroups
• ExpandGroup
• Delete
• MarkAllAsRead
• MarkAsRead
• MarkAsUnread
• MoveItem
• SendAndReceive
• SynchFolder

NOTE: The following methods have not been changed: AddressBook, AdvancedFind, Categories, CustomizeView, FlagItem, ForceUpdate, Forward, GotoToday, GoToDate, GroupBy, NewAppointment, NewContact, NewDefaultItem, NewDistributionList, NewJournalEntry, NewMeetingRequest, NewMessage, NewNote, NewPost, NewTask, NewTaskRequest, NewForm, NewOfficeDocument, Open, OpenSharedDefaultFolder, Reply, ReplyAll, ReplyInFolder, PrintItem, SaveAs, ShowFields, and Sort.

Event Behavior

All events behave as previously documented.

Behavior Changes When You Use an Object Tag in a Web Browser

One side effect of the updated version of the controls occurs if you use the control in an HTML page and also use the <Object> tag to set the View property; all of the other properties that you specify are not applied. A typical symptom that can occur after you use the updated Outlook View Control is that the control displays the Inbox, even though you specify a different folder parameter. To work around this behavior, you can either:

• Use an Object tag to set the control's properties, but completely remove the View parameter so that it does not affect the other parameters. -or-
  
  
• Instead of using an Object tag to set the properties, use a scripting language to programmatically set the properties.

For additional information about the original versions of the Outlook View Control, click the article numbers below to view the articles in the Microsoft Knowledge Base: For additional information about available resources and answersto commonly asked questions about Microsoft Outlook solutions, click the article numbers below to view the articles in the Microsoft Knowledge Base: