To comment on the following update, log in, then open the issue:
http://www.openoffice.org/issues/show_bug.cgi?id=72379
User ace_dent changed the following:
What |Old value |New value
================================================================================
CC|'' |'ace_dent'
--------------------------------------------------------------------------------
Ever confirmed| |1
--------------------------------------------------------------------------------
Status|UNCONFIRMED |NEW
--------------------------------------------------------------------------------
Issue type|DEFECT |ENHANCEMENT
--------------------------------------------------------------------------------
Keywords| |oooqa, security
--------------------------------------------------------------------------------
------- Additional comments from [EMAIL PROTECTED] Fri Dec 8 15:34:52 -0800
2006 -------
Tested with OOo2.0.4, WinXP PC.
Confirmed-
1. Enter '42' into cell A3. Set cell protection to 'Hide All'
2. Select cell C3. Set cell protection to none (default is protected).
3. Set sheet protection on, password 'X'
4. Select cell C3. Press Autosum (or even enter "=A3", any operator will
function)
5. Value of 42 revealed.
While this may be seen as a security flaw, it requires the original creator to
disable protection for parts of the sheet (Step 2). This might occur in sheets
with mixed protected content and user editable content. However, the purpose of
this level of security (as I understand it), is only to hide content for
aesthetics and protect content against accidental editing.
What would the desired behavior be? I might hide a number to keep my sheet
looking tidy, but want to present some calculated result that uses that number
to the end-user. It is my feeling that this Protection feature functions as is
designed.
Regards,
Andrew
---------------------------------------------------------------------
Please do not reply to this automatically generated notification from
Issue Tracker. Please log onto the website and enter your comments.
http://qa.openoffice.org/issue_handling/project_issues.html#notification
---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
