RE: [discuss] Openoffice Security Issue

2009-10-30 Thread Bruce Martin
Dear Ahmed: Any open office file can be protected in a number of ways. 1)The entire file can be saved with a password, provided it is saved in the appropriate Open office native format. 2)Spreadsheets in Calc can also be protected, with selective control; of what cells are

Re: [discuss] Openoffice Security Issue = _not_ a security issue

2009-10-30 Thread Malte Timmermann
Hi Ahmed and Bruce, thanks for looking at this - I must admit that I am not very familiar with the different cell/sheet protection features in Calc. I just wanted to point that this is _not_ a security issue, and even not a privacy issue. Cell protection is a pure UI feature. The content is not

RE: [discuss] Openoffice Security Issue = _not_ a security issue?

2009-10-30 Thread Bruce Martin
Good Morning Malte: It is possible in that case that Oo needs to automatically encrypt Calc sheets where sheet protection is activated, but not necessarily require a password to open the file unless the file is saved with one. This would seem to me to mean the need for a front end layer to the

Re: [discuss] Openoffice Security Issue

2009-10-30 Thread Graham Lauder
On Thursday 29 October 2009 14:32:52 Ahamed Fasudeen wrote: Hi Team, I'm newly use openoffice...I have some query realted for password security. Currently i'm using MSoffice2003. In that i have protect the sheet workbook And i have protect the cell A2:C22(attached sheet) with password

Re: [discuss] Openoffice Security Issue = _not_ a security issue

2009-10-30 Thread Daniel Rentz
Hello, Malte Timmermann schrieb: Cell protection is a pure UI feature. The content is not encrypted in the document (except for password protected documents). So this issue might end up in a missing feature in Calc (cell protection doesn't work w/o sheet protection), or in a bug that the xls

Re: [discuss] Openoffice Security Issue = _not_ a security issue?

2009-10-30 Thread Malte Timmermann
Hi Bruce, short answer - encryption only makes sense when the key is provided from the user, or some other source, like a private key certificate. It is not possible for OOo to encrypt anything on it's own w/o using a static hard coded password, or using a random password and store it in the

Re: [discuss] openoffice security

2005-03-09 Thread Mathias Bauer
Andrews wrote: Mathias Bauer wrote: Andrews wrote: Following on the PDF concept - if Openoffice had a final command that automatically converted a file to PDF, marked it final and date stamped it (or digitally signed it), and then cleared the original this could be a solution. It would then

Re: [discuss] openoffice security

2005-03-08 Thread Lars D. Noodn
On Mon, 7 Mar 2005, Andrews wrote: [...] I have often wondered about the idea of identifying operators and assigning a dedicated font to them so that their work would be easy to identify [...] Isn't that part of the review function? I don't use it myself, but my father does regularly. -Lars Lars

Re: [discuss] openoffice security

2005-03-07 Thread Andrews
Daniel Carrera wrote: Andrews wrote: Thanks for the reply - thought the format could be a problem, I suppose one could export to PDF and then clear the original sheet - I am not sure though how easy the PDF format could be edited. PDF is not an editable format. Give me a while to think

Re: [discuss] openoffice security

2005-03-07 Thread Andrews
Justin Fitzgibbon wrote: This security should be on two levels - lower which allows changes on entering a password and locked _which prevents changes ever being made. If the contents of a document can be decrypted in order to view it theres no way to then lock it against changes, or

Re: [discuss] openoffice security

2005-03-07 Thread Daniel Carrera
Andrews wrote: I firmly believe there is a need to provide document users with the certainty that what they are using is actually final. This is what the new digital signature system is supposed to provide. The file is still editable, but if you edit it, the digital signature will break and

Re: [discuss] openoffice security

2005-03-07 Thread Ian Laurenson
On Tue, 2005-03-08 at 09:03, Andrews wrote: [snip] Another issue that I mentioned in my first email is the possibility of turning a spreadsheet into an input form that users would only be able to enter specified fields that the form would prompt them to fill in and the entry validated for

Re: [discuss] openoffice security

2005-03-07 Thread Mathias Bauer
Andrews wrote: Following on the PDF concept - if Openoffice had a final command that automatically converted a file to PDF, marked it final and date stamped it (or digitally signed it), and then cleared the original this could be a solution. It would then be nice to have a PDF viewer

Re: [discuss] openoffice security

2005-03-06 Thread Harald Schilly
On Sun, 06 Mar 2005 11:59:06 +0200, Andrews [EMAIL PROTECTED] wrote: The ability to secure data at cell level, sheet level and workbook level. This security should be on two levels - lower which allows changes on entering a password and locked _which prevents changes ever being made._ It would

Re: [discuss] openoffice security

2005-03-06 Thread Andrews
Harald Schilly wrote: Thanks have had a look at this and have used it a bit in the past however it would be nice to see it go a step further in * Final complete lock * An indication on the printed form that this is a final unchangeable sheet. * Automatic highlighting of input cells Thanks for

Re: [discuss] openoffice security

2005-03-06 Thread Ian Lynch
On Sun, 2005-03-06 at 10:44, Andrews wrote: Harald Schilly wrote: Thanks have had a look at this and have used it a bit in the past however it would be nice to see it go a step further in * Final complete lock Why not just export as a pdf then? You don't need it in spreadsheet format if

Re: [discuss] openoffice security

2005-03-06 Thread CPH
On Sunday 06 March 2005 09:59, Andrews wrote: [snip] Finally - what you have done, creating free and very useful software, is a fantastic service to computer users all over the world - I just have a concern that eventually the lack of financial reward could kill the project. May I suggest

Re: [discuss] openoffice security

2005-03-06 Thread Claus Agerskov
On Sun, 6 Mar 2005, Ian Lynch wrote: On Sun, 2005-03-06 at 10:44, Andrews wrote: * Final complete lock Why not just export as a pdf then? You don't need it in spreadsheet format if you are never going to edit the cells. As far as I understand the issue it is a final complete lock of

Re: [discuss] openoffice security

2005-03-06 Thread Justin Clift
Andrews wrote: snip This security should be on two levels - lower which allows changes on entering a password and locked _which prevents changes ever being made._ Hi Jeremy, Good thought. :) After reading the above, and thinking about it for a bit, I'm wondering what kind of direction would

Re: [discuss] openoffice security

2005-03-06 Thread Alexandro Colorado
Mensaje citado por Justin Clift [EMAIL PROTECTED]: Andrews wrote: snip This security should be on two levels - lower which allows changes on entering a password and locked _which prevents changes ever being made._ Hi Jeremy, Good thought. :) After reading the above, and thinking

Re: [discuss] openoffice security

2005-03-06 Thread Andrews
Thanks for the reply - thought the format could be a problem, I suppose one could export to PDF and then clear the original sheet - I am not sure though how easy the PDF format could be edited. I notice also that whereas Star Office had a PDF reader open office does not seem to have one. I

Re: [discuss] openoffice security

2005-03-06 Thread Daniel Carrera
Justin Clift wrote: Maybe it's just a matter of making it not possible through OOo2 rather than just not possible at all? The problem is the same as with all other DRM strategies. Once you can *see* the document, it is fundamentally impossible to prohibit changing. The best you can do is

Re: [discuss] openoffice security

2005-03-06 Thread Daniel Carrera
Andrews wrote: Thanks for the reply - thought the format could be a problem, I suppose one could export to PDF and then clear the original sheet - I am not sure though how easy the PDF format could be edited. PDF is not an editable format. Give me a while to think about this problem you

RE: [discuss] openoffice security

2005-03-06 Thread Justin Fitzgibbon
This security should be on two levels - lower which allows changes on entering a password and locked _which prevents changes ever being made. If the contents of a document can be decrypted in order to view it theres no way to then lock it against changes, or prevent people printing it etc,