Bug 142696 - Modification of embedded objects possible on read-only documents
Summary: Modification of embedded objects possible on read-only documents
Status: RESOLVED NOTABUG
Alias: None
Product: LibreOffice
Classification: Unclassified
Component: LibreOffice (show other bugs)
Version:
(earliest affected)
unspecified
Hardware: All All
: medium normal
Assignee: Not Assigned
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2021-06-07 06:56 UTC by Heiko Tietze
Modified: 2022-01-03 11:05 UTC (History)
5 users (show)

See Also:
Crash report or crash signature:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Heiko Tietze 2021-06-07 06:56:03 UTC
The attachment 172653 [details] contains a chart (embedded OLE object) and despite the document is read-only it is possible to start the chart module per double-click and modify the object. I wonder if this is a security/safety risk.
Comment 1 V Stuart Foote 2021-06-07 17:15:50 UTC
On Windows builds, the docoment opens read-only.  Double click of the chart OLE opens its dialog--changes attempted are not applied including the OLE object dialog.  Document can't be saved.

Are you able to save the "edited" document, while in read-only mode? If not either, then no I don't see an issue. Read-only is doing what it should.


=-testing-=

Version: 7.1.3.2 (x64) / LibreOffice Community
Build ID: 47f78053abe362b9384784d31a6e56f8511eb1c1
CPU threads: 8; OS: Windows 10.0 Build 19042; UI render: Skia/Vulkan; VCL: win
Locale: en-US (en_US); UI: en-US
Calc: threaded

Version: 7.2.0.0.alpha1+ (x64) / LibreOffice Community
Build ID: 3b57ebb445df8a2bc3d916ea79f8af45e20e4e62
CPU threads: 8; OS: Windows 10.0 Build 19042; UI render: Skia/Vulkan; VCL: win
Locale: en-US (en_US); UI: en-US
Calc: threaded
Comment 2 raal 2021-12-20 17:38:44 UTC
@Heiko, see comment 1. 
Tested with Version: 7.4.0.0.alpha0+ / LibreOffice Community
Build ID: d47628f287f4377394c4ff488c433bfe254b6abe
CPU threads: 4; OS: Linux 5.11; UI render: default; VCL: gtk3
Locale: cs-CZ (cs_CZ.UTF-8); UI: en-US
Calc: threaded
and I was not able change the chart in read only mode.
Comment 3 Heiko Tietze 2022-01-03 11:05:46 UTC
True, changes are not applied. So it's just a minor usability flaw.