Bug 141913 - Bypass cell protection selection via Name box
Summary: Bypass cell protection selection via Name box
Status: NEW
Alias: None
Product: LibreOffice
Classification: Unclassified
Component: Calc (show other bugs)
Version:
(earliest affected)
Inherited From OOo
Hardware: All All
: medium normal
Assignee: Not Assigned
URL:
Whiteboard:
Keywords:
Depends on:
Blocks: Cell-Sheet-Protection
  Show dependency treegraph
 
Reported: 2021-04-26 11:19 UTC by Olivier Hallot
Modified: 2023-07-26 22:07 UTC (History)
0 users

See Also:
Crash report or crash signature:


Attachments
Sample file that shows how to bypass protected cell selection (26.55 KB, application/vnd.oasis.opendocument.spreadsheet)
2021-04-26 11:19 UTC, Olivier Hallot
Details

Note You need to log in before you can comment on or make changes to this bug.
Description Olivier Hallot 2021-04-26 11:19:30 UTC
Created attachment 171416 [details]
Sample file that shows how to bypass protected cell selection

Assuming that you are not to be allowed to set your cursor in the protected cell range if option "Select protected cells" is unchecked.

1) When it is unchecked, cursor movements to enter the protected range is forbidden: OK

2) Click on a protected cell will NOT place the cursor at the desired place: OK

3) Type a range reference inside the protected area in the Name box (upper left). The range is selected, copy action is possible. NOT OK. 


In the sample file attached, the orange range is protected and selection not allowed (no password). 
Insert A1:A10 in the Name box to get the range A1:A10 selected anyway. Copy and paste elsewhere to have the contents copied (with the protect flag enabled, by the way).
Comment 1 Olivier Hallot 2021-04-26 11:21:39 UTC
Protection is enabled in Tools - Protect Sheet


Version: 7.2.0.0.alpha0+ / LibreOffice Community
Build ID: 41145efffe9d5af358a52b9e114bb01b98b3d7c2
CPU threads: 16; OS: Linux 5.8; UI render: default; VCL: x11
Locale: en-US (en_US.UTF-8); UI: en-US
Calc: threaded
Comment 2 Timur 2021-04-26 13:36:26 UTC
Repro 7.2+ abd OO. In OO, copy was also possible via mouse selection, which was later fixed, but not via Name box selection.
Comment 3 Timur 2021-04-26 14:05:59 UTC
Copy via mouse was fixed in 4.4 in range https://cgit.freedesktop.org/libreoffice/core/log/?qt=range&q=2e3d7c742a1c1253c4bb2af1c3d1b1506d2e7af4..0771823d80abadf8e7f2ccc078f3f9e2c277f8a5. 
Couldn't bisect further in 44max.
Comment 4 QA Administrators 2023-04-27 03:24:21 UTC Comment hidden (obsolete)
Comment 5 Stéphane Guillou (stragu) 2023-07-26 22:07:49 UTC
Still reproducible in:

Version: 24.2.0.0.alpha0+ (X86_64) / LibreOffice Community
Build ID: 24d0a62bd75b9a895c419aa165da648ab18f134d
CPU threads: 8; OS: Linux 5.15; UI render: default; VCL: gtk3
Locale: en-AU (en_AU.UTF-8); UI: en-US
Calc: threaded