umm. if the user can open the document and see the contents there is no
use of any password protection, really.
i didn't read fully that thread, but i understand the it's more about
passwords that prohibit editing or viewing some parts of the document
(but they are available to oo.org at that moment).
whole document protection could not be that, because, um, if you have
the document open password is no good at this point.
so, what is the use of password protected entities that are available to
user ? depending on how sophisticated the user is, all these
'protections' can be avoided pretty easily. the only way to hkeep them
would be to completely control hardware and sofware (think drm & closed
source software)
it is similar to pdf "security" regarding to no-print and no-copy tags -
they are just tags that instruct the software, so if the software
chooses to ignore these flags... there you go.
what you can see, what the softwar can access - you just should consider
that available for everybody.
now, how could you guarantee that the document has not changed ? oo.org
2.0 will include digital signature capabilities. this way users will be
able to tell that there have been unauthotized changes made to the document.
of course, full document completion by password at opening & encryption
is different, but it also suffers only from the problem that resaving to
other formats removes the password without warning. and this is true for
most of the formats, so warning the user & then doing as it orders is
the best and, i think, the only reasonable way.
Jan van Aar wrote:
Robert,
Look at the discussion I started about password protection Subject
"document protection" and issue 54587 "password protection gets useless".
The password protection of a document can simply be removed by Save As a
MsOffice document. I was very surprised when I discovered this and I
thought it a bug, but my issue is closed and there will nothing be done.
It is a pity, I think.
Greetings,
Jan van Aar
--
Rich
---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
