Outlook Security / scripting

[Chad A. Gross [SBS MVP]]

Ok guys & gals -

I've got an InfoPath form that is using a custom submit script to submit
both to a Sharepoint forms library and send certain content in the body of
an email. I'm getting an error indicating that InfoPath could not create
the Outlook.Application object. I'm sure this is a security issue, because
if I create a digital certificate, sign the form and give it full trust, it
works great. But if I remove the cert and drop this back down to domain
permissions, I get the error mentioned above. I know this has to be
something simple, but Google isn't cooperating . . . :^) Thanks in
advance for any assistance!

--

Chad A. Gross - SBS MVP
SBS ROCKS!

www.msmvps.com/cgross
www.gosbs.org

 

[Patrick Halstead [InfoPath MVP]]

Hi Chad,
Why are you using an Outlook.Application object? InfoPath has default e-mail
submission support built in.
Patrick

 

[Chad A. Gross [SBS MVP]]

I'm using Outlook because I need to email information to an external
contact. Here's the skinny: This is being used to track product sample
requests from customers. The email portion of the submit is used to send an
email containing the customer Ship-To info as well as the product samples
they're requesting to a contact with an external vendor. We have additional
sensitive info on the form that we do not want the vendor to see.
Therefore, I'm using a script to just grab the little info I need and put it
in the body of the email. In addition, we also have a need for the sales
rep to be able to add to the content of the message if necessary. Thus,
I've been using the Outlook object. I am open to other ideas as I'm fairly
new to the scripting side of InfoPath. Thanks!

--

Chad A. Gross - SBS MVP
SBS ROCKS!

www.msmvps.com/cgross
www.gosbs.org

 

[Patrick Halstead [InfoPath MVP]]

Hi again,
My guess is that you'll have to be full trust to programmatically send
e-mail since there are security issues around sending e-mail without
prompting the user. I recommend using a SharePoint event handler to do this.
This is also a better practice since it is more transactional. If you
currently do both a sharePoint submit and an e-mail send, it's not atomic.
I.e. if SharePoint submit fails (offline), it will still send e-mail. You
probably want the SharePoint submit first and if that fails, don't send
e-mail. There are a couple good online articles on writing ShP event
handlers. The issue with them is that you have to be an admin to install
them.
Hope that helps,
Patrick