To comment on the following update, log in, then open the issue:
http://www.openoffice.org/issues/show_bug.cgi?id=50169
                  Issue #:|50169
                  Summary:|respect "Trusted sources" at all security levels
                Component:|framework
                  Version:|current
                 Platform:|All
                      URL:|
               OS/Version:|All
                   Status:|NEW
        Status whiteboard:|
                 Keywords:|
               Resolution:|
               Issue type:|ENHANCEMENT
                 Priority:|P3
             Subcomponent:|ui
              Assigned to:|requirements
              Reported by:|fs





------- Additional comments from [EMAIL PROTECTED] Wed Jun  1 04:23:37 -0700 
2005 -------
Currently, you can configure different security levels in
"Tools|Options|Security|Macro Security", affecting which documents from which
sources are allowed to run embedded macros.

Ignoring signed documents for the moment, there are three levels:
- only execute macros from trusted sources
- manually confirm macros embedded in documents
- execute all macros

Additionally, there's a list of trusted sources (e.g. file locations) which can
be configured by the user.

Unfortunately, this list is only respected at the highest security level. This
means that it's not possible to
- execute macros from trusted sources without confirmation
  AND
  confirm all other macros

I claim that users often have specific file locations where they collect trusted
documents (for example: ~/documents/specifications), which they want to execute
without being asked, but still want to have the possibility to execute macros in
other documents with confirmation.
This is not possible anymore today. It was possible in OpenOffice.org 1.x, and
got lost with the re-design of the security concept.

Thus I suggest to respect the "Trusted sources" list on all security levels, not
only on the highest.

---------------------------------------------------------------------
Please do not reply to this automatically generated notification from
Issue Tracker. Please log onto the website and enter your comments.
http://qa.openoffice.org/issue_handling/project_issues.html#notification

---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to