[Upstream] [hardy] OpenOffice loses password protection

[Graham Hodge]

Binary package hint: openoffice.org

Open Office 2.3.0 was used to open a Word 2000 document protected by a password.
The password was requested and then opened correctly. It was saved in odt format.
It was opened and requested the password as expected.
The file was closed (with no changes made) and moved in the file system.
A link to the document was also made and placed on the desktop.
After this, OO opened the file without requesting the password.
The file now appears to have lost its password protection.

[Graham Hodge (graham-hodge)]

James

Thanks for this update. Playing with the Save feature further after I
lodged this "bug", I realise now it might be more an "expectation" on my
part. When I opened the .doc file (and OO correctly requested the
original MS password) I had expected OO to tell me when I saved it
in .odt format that it was no longer being password protected.

One solution to my expectation problem would be to default the "Save
with Password" checkbox (on Save and Save As forms) to "ticked", or
alternatively to ask via a dialog whether this resaved copy should also
be protected if the original was so protected.

I note that when saving a new file for the first time, the "Save with
Password" checkbox is a valid option when using "Save" but it grayed out
when using "Save As". Not sure why this is different.

My real concern here is that others may also mistakenly think the file
is still protected when resaved in .odt (which it is not) if the
original was protected and hence the possible security issue.

What does changing the visibility to "Public" do ?

Regards

Graham Hodge
Christchurch
New Zealand

On Wed, 2008-01-02 at 20:42 +0000, Jamie Strandboge wrote:
> ** Visibility changed to: Public
>

[Jamie Strandboge (jdstrand)]

Graham, since there wasn't any sensitive information in the bug report, I changed it to public to get more developer involvement (when it is marked as private, only a few people can see it).

[Brian Murray (brian-murray)]

Thank you for taking the time to report this bug and helping to make Ubuntu better. I personally don't have access to Word 2000 so it would be helpful if you could provide us with a test document for recreating this bug report. Thanks in advance.

[Chris Cheney (ccheney)]

Confirmed to still exist on upstream's 2.4.0~rc2

[Ccheney-b (ccheney-b)]

When saving a Word document (.doc) that uses a password to ODT format default
the 'Save with password' option to enabled.

[Michael-ruess (michael-ruess)]

MRU->MAV: opening a password protected MS Word document will currently work as
expected. But when saving this as odt, in my eyes the password protection should
be enabled by default.
Because I think this is (at least a small) security concern, I change this from
"Enhancement" to "Defect".

[Michael-ruess (michael-ruess)]

Reassigned to MAV. See my comments above.

[Björn Michaelsen (bjoern-michaelsen)]

[This is an automated message.]
There are no new official OpenOffice.org releases in Ubuntu packaging anymore => Won't Fix

If the problem persists, please mark this bug as "also affects project Libreoffice" or "also affects distribution Libreoffice (Ubuntu)" if that has not happened already.

Please leave references to upstream OpenOffice.org bugs in place to allow cross pollination.

[Mkrcds (mkrcds)]

Reset assigne to the default "<email address hidden>".