To comment on the following update, log in, then open the issue:
http://www.openoffice.org/issues/show_bug.cgi?id=52050
                  Issue #:|52050
                  Summary:|MS Password preventing editing is ignored by OO, a
                          |potentially serious security risk
                Component:|Word processor
                  Version:|OOo 2.0 Beta
                 Platform:|PC
                      URL:|
               OS/Version:|Windows NT
                   Status:|UNCONFIRMED
        Status whiteboard:|
                 Keywords:|
               Resolution:|
               Issue type:|DEFECT
                 Priority:|P3
             Subcomponent:|open-import
              Assigned to:|mru
              Reported by:|rvolke





------- Additional comments from [EMAIL PROTECTED] Fri Jul 15 12:04:34 -0700 
2005 -------
I have OpenOffice v109 and work on an NT box with MS Office 97.  I was testing 
how OpenOffice handled Microsofts password encrypted files when I found a 
potential bug.  OpenOffice respected the passwords that do not allow users to 
open particular documents, however if the document was only given a password 
(when being created in MS Office) to prevent editing, OpenOffice could open the 
document, edit it, and save it with name without having to type in the 
password.  This is a serious security concern, in this case it would be better 
that it couldn't open the document at all.  This issue is present in both 
Writer and Calc and I haven't tested out impress as of yet.  Before I can roll 
this out to my company I really need to know how to alleviate this problem.  
Thanks

Robert Volke

---------------------------------------------------------------------
Please do not reply to this automatically generated notification from
Issue Tracker. Please log onto the website and enter your comments.
http://qa.openoffice.org/issue_handling/project_issues.html#notification

---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to