Bug 59926 - FILESAVE breaks Edit Password Protection
Summary: FILESAVE breaks Edit Password Protection
Status: NEW
Alias: None
Product: LibreOffice
Classification: Unclassified
Component: LibreOffice (show other bugs)
Version:
(earliest affected)
3.3.3 release
Hardware: Other All
: medium normal
Assignee: Not Assigned
URL:
Whiteboard: needsUXEval
Keywords:
: 92801 (view as bug list)
Depends on:
Blocks: Writer-Comments
  Show dependency treegraph
 
Reported: 2013-01-27 09:36 UTC by Rainer Bielefeld Retired
Modified: 2023-02-20 13:40 UTC (History)
5 users (show)

See Also:
Crash report or crash signature:


Attachments
Sample Document (46.78 KB, application/vnd.oasis.opendocument.text)
2013-01-27 09:36 UTC, Rainer Bielefeld Retired
Details
protected document (12.82 KB, application/vnd.oasis.opendocument.text)
2021-07-31 09:51 UTC, BogdanB
Details
Sample document shows that also CALC is affected (10.33 KB, application/vnd.oasis.opendocument.spreadsheet)
2022-01-29 08:28 UTC, Rainer Bielefeld Retired
Details

Note You need to log in before you can comment on or make changes to this bug.
Description Rainer Bielefeld Retired 2013-01-27 09:36:01 UTC
Created attachment 73721 [details]
Sample Document

Steps how to reproduce  with server installation of  "Version 4.1.0.0.alpha0+ (Build ID: 2823789bec0c029d9714aff0ed65923e23177ef) TinderBox: Win-x86@6, Branch:master, Pull Time: 2823789bec0c029d9714aff0ed65923e23177ef" ENGLISH UI / German Locale  on German WIN7 Home Premium (64bit) with LO41 Masters User Profile:

1. open attahched sample document
   > You can't edit
   > When You click icon "Edit File" in Standard Toolbar you will be asked for
     Password
2. Save document under new name
   Expected: PW protection for edits persists
   Actual: Document editable

To be honest, I am not sure whether I understand this PW protection correctly. Help tells very general: "Undoing password protection: To remove a password, open the document, then save without password."

So the observed behavior might be intended, but such a function would be completely useless. When I decide that nobody should be able to edit a document except people who know the PW, it's not acceptable that that protection can be bypassed so easily. There seems no real difference to "Open write Protection", the current PW Edit protection seems rather useless to me.

Already the same with LibO 3.3.3, I think this never worked as I expect.
Comment 1 Jorendc 2013-02-06 15:12:26 UTC
I can confirm this behavior using Linux Mint 14 x64 with LibreOffice 4.0.0.3 rc3 and LibreOffice Version 4.1.0.0.alpha0+ (Build ID: 1a3c90a292c7fc9060604151de9dc51eecf5b6a).
Comment 2 bugquestcontri 2014-01-09 12:19:10 UTC
I also can confirm this behavior on XP/SP3 using LibO Version: 4.1.4.2
Build ID: 0a0440ccc0227ad9829de5f46be37cfb6edcf72
Comment 3 Joel Madero 2015-05-02 15:41:46 UTC Comment hidden (obsolete)
Comment 4 Buovjaga 2015-06-20 13:59:21 UTC
Still repro.

Of course we can unzip the .odt file and view the xml contents, so pwd protection is not "real" security ie. the file is not encrypted.

Win 7 Pro 64-bit Version: 5.1.0.0.alpha1+
Build ID: 3ecef8cedb215e49237a11607197edc91639bfcd
TinderBox: Win-x86@62-merge-TDF, Branch:MASTER, Time: 2015-06-19_23:16:58
Locale: fi-FI (fi_FI)
Comment 5 Buovjaga 2015-07-29 19:20:13 UTC
*** Bug 92801 has been marked as a duplicate of this bug. ***
Comment 6 QA Administrators 2016-09-20 10:21:23 UTC Comment hidden (obsolete)
Comment 7 Óvári 2016-09-21 10:45:21 UTC
(In reply to QA Administrators from comment #6)

Still reproducible.

Version: 5.1.4.2
Build ID: 1:5.1.4-0ubuntu1
CPU Threads: 2; OS Version: Linux 4.4; UI Render: default
Comment 8 QA Administrators 2018-04-27 02:30:44 UTC Comment hidden (obsolete)
Comment 9 QA Administrators 2020-04-27 03:41:27 UTC Comment hidden (obsolete)
Comment 10 BogdanB 2021-07-31 09:51:19 UTC
Created attachment 173991 [details]
protected document

In order to save with password protection go to File - Save as  and check Save with Password. No one could acces your data without your password. I will attach a new document. Please try to open and read it.


Version: 7.1.5.2 / LibreOffice Community
Build ID: 85f04e9f809797b8199d13c421bd8a2b025d52b5
CPU threads: 4; OS: Linux 5.8; UI render: default; VCL: gtk3
Locale: ro-RO (ro_RO.UTF-8); UI: en-US
Calc: threaded
Comment 11 Buovjaga 2021-08-01 05:36:26 UTC
(In reply to BogdanB from comment #10)
> Created attachment 173991 [details]
> protected document
> 
> In order to save with password protection go to File - Save as  and check
> Save with Password. No one could acces your data without your password. I
> will attach a new document. Please try to open and read it.

The problem is seen only with attachment 73721 [details]. I guess there was some different protection scheme earlier. Not sure if it is worth keeping this open.
Comment 12 QA Administrators 2022-01-29 03:55:01 UTC Comment hidden (obsolete)
Comment 13 Rainer Bielefeld Retired 2022-01-29 08:27:07 UTC
Comment 10 and Comment 11 describe wrong tests 😥

Attachment 173991 [details] is protected against opening without password knowledge, not against editing without PW knowledge. That's something completely different.

The problem still exists with Installation of Version 7.2.4.1 (x64) / LibreOffice 
Build  27d75539669ac387bb498e35313b970b7fe9c4f9
CPU threads: 12; OS: Windows 10.0 Build 19042; UI render: Skia/Raster; VCL: win; Locale: de-DE (de_DE); UI: de-DE; Calc: threaded;  Elementary Theme; My normal User Profile

I doubt that this is a feature and not a bug, but ...
Comment 14 Rainer Bielefeld Retired 2022-01-29 08:28:37 UTC
Created attachment 177896 [details]
Sample document shows that also CALC is affected
Comment 15 Rainer Bielefeld Retired 2022-01-29 08:29:20 UTC
Component due to Comment 14