Issue 30509 - security of code
Summary: security of code
Status: CONFIRMED
Alias: None
Product: Calc
Classification: Application
Component: code (show other issues)
Version: OOo 1.1.2
Hardware: All All
: P3 Trivial (vote)
Target Milestone: ---
Assignee: AOO issues mailing list
QA Contact:
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2004-06-21 10:02 UTC by martin_neyman
Modified: 2013-08-07 15:13 UTC (History)
1 user (show)

See Also:
Issue Type: ENHANCEMENT
Latest Confirmation in: ---
Developer Difficulty: ---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this issue.
Description martin_neyman 2004-06-21 10:02:53 UTC 
Protected cells, hidden columns, rows and sheets in the document should stay 
protected and invisible after linking the document to another one. At this 
moment they are totally unprotected and visible after linking.
Comment 1 dfrench 2004-06-21 11:14:52 UTC 
This post may help narrow down the issue 
http://www.oooforum.org/forum/viewtopic.php?t=9477
Comment 2 frank 2004-06-22 09:49:28 UTC 
Hi Niklas,

this should be fixed for OOo2.0.

Frank
Comment 3 niklas.nebel 2004-06-22 10:48:54 UTC 
The linked sheet isn't protected and shouldn't be. It's a reference to the
original data and you have to be able to modify it.

Sheet protection isn't meant to be "secure" in any way. It isn't more than a
hint to the OOo software, advising it not to modify the cells. Remember, OOo
needs to be able to read the formulas without a password, so anyone else can, too.
Comment 4 frank 2004-06-22 11:47:13 UTC 
reopened to assign it to User experience
Comment 5 frank 2004-06-22 11:51:50 UTC 
Hi Bettina,

this is a security hole. As OC told me, Excel is able to store the protection
state of a table at the table itself, it can determine how to act if a sheet is
imported into another workbook. We should import protected sheets as Excel does.

Frank
Comment 6 martin_neyman 2004-06-22 22:49:14 UTC 
"nn" wrote:

"The linked sheet isn't protected and shouldn't be. It's a reference to the
original data and you have to be able to modify it.

Sheet protection isn't meant to be "secure" in any way. It isn't more than a
hint to the OOo software, advising it not to modify the cells. Remember, OOo
needs to be able to read the formulas without a password, so anyone else can, 
too."

My answer:

What is hidden is not a data. It is formulas, constants and data which should 
not be modified;
that's the reason why it is hidden in the first place!
regards,
MN
Comment 7 bettina.haberer 2010-05-21 14:50:40 UTC 
To grep the issues easier via "requirements" I put the issues currently lying on
my owner to the owner "requirements".