incubator-ooo-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From bugzi...@apache.org
Subject [Bug 119152] creating seperating temp files for images for password protected document (if contains images)
Date Sun, 16 Sep 2012 01:06:38 GMT
https://issues.apache.org/ooo/show_bug.cgi?id=119152

orcmid <orcmid@apache.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |orcmid@apache.org

--- Comment #5 from orcmid <orcmid@apache.org> ---
I noodled around in the Forum reports.

The problem is apparently that OpenOffice is being used as a viewer.  It is
launched by an application that keeps the document privately in what is meant
to be in a secure way with respect to some sort of DRM.

In this case, OpenOffice is running in the account of the user.  On Windows,
that means any temporary files (if created in the required manner) are already
placed in a folder in which only that user and Adminstrators have all rights.

The problem is that an user who is being granted this view can, while the
document is open, find the temp files and carry copies off into a private
location not known to the eDRM, thereby breaking the DRM on such content.

This does not strike me as a defect in OpenOffice.  It is not designed to
provide secure browsing, even for saved-with-password files that the user has
the password for.  And there is no provision in OpenOffice to honor some sort
of DRM mechanism.

-- 
You are receiving this mail because:
You are on the CC list for the bug.

Mime
View raw message