There is a new problem around encryption (and, consequentially, protection) in 
LO 3.4.0rc2 on x86 Windows.  This may be related to the non-operating "Change 
Password" feature.

The problem is that encryption of documents won't turn off, so there is no way 
to save a decrypted document as unencrypted.  LO 3.4.0rc2 always encrypts all 
saves of a previously-encrypted document.  It uses the previous password 
automatically (or its hash, which is what the encryption uses for its 
key-generation operations).

This has been confirmed with LO 3.4.0rc2 on x86 Windows (Vista running in 
Virtual PC on Windows 7).  I have also confirmed that the problem does not 
exist in LO 3.3.2.

1. The setup - A document is saved with encryption and as part of the setting 
of document properties on save, a protection password is also set and the 
document is marked as read-only (and change-recording is locked on).

2. In opening the document, after the password is provided, the document opens 
as read-only and the protection is in effect. The Document Properties | 
Security tab has the protection option greyed out (it doesn't say Unprotect but 
Protect) and the check boxes are greyed out with no checks in them.  This is 
common.  It happens with LO 3.3.2 also.

3. Doing a Save As, with the save with password NOT CHECKED, there should now 
be a writeable copy which, if opened, does not require a password, is not 
encrypted, is not read-only, and has the UNPROTECT option visible on the 
Document Properties | Security tab.  That is how it works for LO 3.3.2.

4. For LO 3.4.0rc2, what happens is the Save As makes an encrypted document.  
It uses the password that was originally created for that (and which it is now 
remembering at least a hash for).  So we have a new document which is 
encrypted, read only, and protected, and opening the document takes us back to 
step (2).  There is no way out of this.  (Well, actually, it can be opened in 
LO 3.3.2 to rescue the document.)

 - Dennis

-----Original Message-----
From: libreoffice-bounces+dennis.hamilton=acm....@lists.freedesktop.org 
[mailto:libreoffice-bounces+dennis.hamilton=acm....@lists.freedesktop.org] On 
Behalf Of Dennis E. Hamilton
<http://lists.freedesktop.org/archives/libreoffice/2011-May/013065.html>
Sent: Tuesday, May 31, 2011 09:29
To: [email protected]
Cc: [email protected]; 'Marc ParĂ©'
Subject: Re: [Libreoffice] Encrypted password -- change?

I am thinking two (or three) different features are being confused with each 
other.

[ ... ]

_______________________________________________
LibreOffice mailing list
[email protected]
http://lists.freedesktop.org/mailman/listinfo/libreoffice

Reply via email to