bypassing password request by pressing 'cancel' 4 times

[Frank Sauerburger]

I have setup a 'maunal' proxy under network > network proxy. To set it up I have entered by password.

After a while (also after restarting the control center) I change the form form 'manual' to 'none'. A window pops up which requests my password to perform the changes. When I press 'cancel' four times, the changes are applied, without the password!

ProblemType: Bug
DistroRelease: Ubuntu 14.04
Package: unity-control-center 14.04.3+14.04.20140922-0ubuntu1.1
ProcVersionSignature: Ubuntu 3.16.0-51.69~14.04.1-generic 3.16.7-ckt17
Uname: Linux 3.16.0-51-generic x86_64
ApportVersion: 2.14.1-0ubuntu3.18
Architecture: amd64
CurrentDesktop: Unity
Date: Sun Nov 1 22:08:52 2015
EcryptfsInUse: Yes
ExecutablePath: /usr/bin/unity-control-center
InstallationDate: Installed on 2015-03-05 (241 days ago)
InstallationMedia: Ubuntu 14.04.2 LTS "Trusty Tahr" - Release amd64 (20150218.1)
SourcePackage: unity-control-center
UpgradeStatus: No upgrade log present (probably fresh install)
usr_lib_unity-control-center:
 deja-dup 30.0-0ubuntu4
 gnome-control-center 1:3.6.3-0ubuntu56.1

[Robert Ancell (robert-ancell)]

Can you get a screenshot of the dialog? You shouldn't need a password to change the proxy settings.

[Frank Sauerburger (sauerburger)]

screenshot of the dialog

[Sebastien Bacher (seb128)]

does it really do the changes or is it only the UI suggesting it did? (like if you close it and reopen, does it still have the new value)

[Frank Sauerburger (sauerburger)]

yes the changes are applied. after pressing 'cancel' 4 times my public ip address changes to the one of my proxy.
(I am using ssh -D 12345 <proxy-server> to connect to my proxy)

[Frank Sauerburger (sauerburger)]

steps to reproduce:
1) open system settings > network > network proxy
2) change mode to manual
3) enter socks host "localhost" and port 12345 as in screenshot
4) click on apply system wide
5) the authenticate dialog appears, press cancel 4 times
6) open browser and go to any website, chrome and firefox complain about the proxy which means that the settings have been applied. the proxy localhost:12345 is not responding, because we didn't set it up.

This means either we can go around the security check by clicking cancel 4 times, or there shouldn't be a dialog box in the first place.

[Frank Sauerburger (sauerburger)]

is some able to reproduce
 1) that the authentication dialog shows up
 2) that one can bypass it?