RE: [discuss] Openoffice Security Issue

2009-10-30 Thread Bruce Martin
Dear Ahmed: Any open office file can be protected in a number of ways. 1)The entire file can be saved with a password, provided it is saved in the appropriate Open office native format. 2)Spreadsheets in Calc can also be protected, with selective control; of what cells are

Re: [discuss] Openoffice Security Issue = _not_ a security issue

2009-10-30 Thread Malte Timmermann
Hi Ahmed and Bruce, thanks for looking at this - I must admit that I am not very familiar with the different cell/sheet protection features in Calc. I just wanted to point that this is _not_ a security issue, and even not a privacy issue. Cell protection is a pure UI feature. The content is not

RE: [discuss] Openoffice Security Issue = _not_ a security issue?

2009-10-30 Thread Bruce Martin
Good Morning Malte: It is possible in that case that Oo needs to automatically encrypt Calc sheets where sheet protection is activated, but not necessarily require a password to open the file unless the file is saved with one. This would seem to me to mean the need for a front end layer to the

Re: [discuss] Openoffice Security Issue

2009-10-30 Thread Graham Lauder
On Thursday 29 October 2009 14:32:52 Ahamed Fasudeen wrote: Hi Team, I'm newly use openoffice...I have some query realted for password security. Currently i'm using MSoffice2003. In that i have protect the sheet workbook And i have protect the cell A2:C22(attached sheet) with password

Re: [discuss] Openoffice Security Issue = _not_ a security issue

2009-10-30 Thread Daniel Rentz
Hello, Malte Timmermann schrieb: Cell protection is a pure UI feature. The content is not encrypted in the document (except for password protected documents). So this issue might end up in a missing feature in Calc (cell protection doesn't work w/o sheet protection), or in a bug that the xls

Re: [discuss] Openoffice Security Issue = _not_ a security issue?

2009-10-30 Thread Malte Timmermann
Hi Bruce, short answer - encryption only makes sense when the key is provided from the user, or some other source, like a private key certificate. It is not possible for OOo to encrypt anything on it's own w/o using a static hard coded password, or using a random password and store it in the