Situation: Microsoft Outlook 2007, Exchange Server 2003 - User A grants
Reviewer status for the Calendar to User B. All other Permissions for User B
are set to None by User A. Mysteriously, User B is able to put the name of
User A in the "From:" field of new e-mails and send e-mail "on behalf of"
User A.
Even more mysteriously, this does not work for all users to who such
permissions have been granted. I can replicate it by sending e-mail "from"
some people who have granted Reviewer permissions to their Calendar to me,
but not for others.
I cannot send "on behalf of" anyone who has not granted me Reviewer
permissions on their Calendar.
We definitely want to prevent this - the person who brought it to my
attention is a manager who does not want people to be able to send e-mail "on
behalf of" her!!
PS - I was able to send e-mail "on behalf of" the manager (who has granted
me Reviewer permissions to her Calendar) from an Outlook 2003 client, too.
|