Share via

The calendar organizer is wrong/fake, when an user check other's shared calendar, and the calendar permission is freebusyread

plugintest1 0 Reputation points
2024-01-02T08:01:40.2233333+00:00

[Reproduce Step]

  1. user A shares his primary calendar with user B
  2. user A sets the calendar permission to "Can view when I'm busy" to user B
  3. user B sends GET calendars/{primary calendar id of user A}/events API

[Expect Step]

cause user B doesn't have permission to check the event organizer of user A(only freebusyread permission), so the organizer fields should be empty, and the isOrganizer field should be false

[Actual Step]

the organizer fields are all user B, and the isOrganizer fields are all true

[Another Question]

How does Outlook client check if the organizer field is wrong

Microsoft Security | Microsoft Graph
0 comments No comments
{count} votes

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.