OfficeDev / office-js

A repo and NPM package for Office.js, corresponding to a copy of what gets published to the official "evergreen" Office.js CDN, at https://appsforoffice.microsoft.com/lib/1/hosted/office.js.
https://learn.microsoft.com/javascript/api/overview
Other
670 stars 95 forks source link

ItemSend event not triggered when creating 'quick' meeting request from within new Outlook calendar layout #4074

Open neville-jones opened 7 months ago

neville-jones commented 7 months ago

Your Environment

Expected behavior

A meeting organizer creates a new meeting request in their Outlook calendar; they use the new 'quick' means of creating a meeting (with attendees) by clicking in the calendar on the day they want to hold the meeting; they do not use the 'New event' button in the toolbar. The organizer forgets to include minimum required information to meet security policy (or content violates policy) so when they attempt to send the invite the Outlook add-in is invoked to alert them to the missing information or that which violates policy.

Current behavior

The meeting request is sent to invitees without the Outlook add-in being invoked.

Steps to reproduce

  1. Install an Outlook on-send add-in
  2. As user with add-in, open Outlook calendar
  3. As meeting organizer, create new meeting request from within the calendar view (not using "New event" toolbar button)
  4. Create meeting with subject, add attendees, and for our live example include the work "blockedword" in the meeting body
  5. Click Send button
  6. Meeting request sent without seeing the "Contoso Message Body Checker" notification message in the toolbar and the send being cancelled

Link to live example(s)

  1. We have made a fork of the Outlook Add-in On-Send sample at https://github.com/neville-jones/Outlook-Add-in-On-Send and hosted it on Azure; with a correction to the URLs used in the manifest
  2. The manifest URL for the body checker sample is https://victorious-ocean-057516210.azurestaticapps.net/Contoso%20Message%20Body%20Checker.xml
  3. After sideloading this add-in you can confirm it is triggered as expected for meeting requests created in the 'full form' mode, but not for meeting requests created in the 'quick' mode from within the calendar

Context

Our add-in enforces compliance and without this enforcement security policy can be violated by meeting organizers. This is similar to cases #3944 #3834 #3833 #3808 #1256 #1247 but even wider in scope for violation.

Useful logs

Screenshots attached:

2024-02-01_11-40-40

2024-02-01_11-54-13

ajays-msft commented 7 months ago

@neville-jones - Unfortunately, this is a limitation in the product. In order for add-ins to run, it should be a full compose window, and not the quick-event. We can consider this as a new feature request.

We track Outlook add-in feature requests on ourTech Community Page. Please submit your request there and choose the appropriate label(s). Feature requests on Tech Community are considered, when we go through our planning process.

neville-jones commented 7 months ago

Thanks for your response @ajays-msft but I don't agree this qualifies as a feature request.

The official documentation for the Outlook on-send feature does not list this as a current limitation https://learn.microsoft.com/en-us/office/dev/add-ins/outlook/outlook-on-send-addins?tabs=windows#limitations or https://learn.microsoft.com/en-us/office/dev/add-ins/outlook/outlook-add-ins-overview#mailbox-items-available-to-add-ins so it seems a bug that Outlook does not raise the on-send event just because the organizer is using the quick mode: an item is being sent from Outlook, our add-in is subscribed to such events and so should be notified of the event.

neville-jones commented 7 months ago

Hi again @ajays-msft

Is there any mechanism to switch off the quick event feature or make it so that the quick event feature opens the full meeting compose window instead? I couldn't find any settings in the M365 or Exchange Online admin centers to allow either, nor could I find where this new feature was described in the M365 roadmap https://www.microsoft.com/en-AU/microsoft-365/roadmap?filters=Launched%2COutlook%2CRolling%20out%2CIn%20development&searchterms=event (I was hoping to find more information about this feature to see if it could be controlled by administrators).

rajjha-msft commented 7 months ago

Hey @neville-jones

There is no way as of now to disable the quick event feature. As mentioned already, please consider raising a feature request based on your requirements.

@neville-jones - Unfortunately, this is a limitation in the product. In order for add-ins to run, it should be a full compose window, and not the quick-event. We can consider this as a new feature request.

We track Outlook add-in feature requests on ourTech Community Page. Please submit your request there and choose the appropriate label(s). Feature requests on Tech Community are considered, when we go through our planning process.

neville-jones commented 7 months ago

OK, feature request raised at https://techcommunity.microsoft.com/t5/microsoft-365-developer-platform/quick-event-feature-of-calendar-should-have-administration/idi-p/4056560