I have a SharePoint calendar with restricted edit permissions. Only a few people have edit but everyone else has read permissions. This works in SharePoint.
However when the calendar is connected to outlook, we have found that readonly users can create an event in their local outlook view for that calendar. So instead of getting permission denied, they seem to be able to create local cached events on the calendar.
The SharePoint calendar does not display these items but their local outlook client will display them until they delete and reconnect the calendar (at which point it is accurate again, only showing the events that exist in SharePoint).
I'm sure disabling outlook cache would help here but I'd rather not do that if I don't have to.
Any other thoughts on how to prevent this?