[Libreoffice-bugs] [Bug 122149] New: Libreoffice gives access to the same file with a different UID/GID in Servermode
bugzilla-daemon at bugs.documentfoundation.org
bugzilla-daemon at bugs.documentfoundation.org
Mon Dec 17 06:23:52 UTC 2018
https://bugs.documentfoundation.org/show_bug.cgi?id=122149
Bug ID: 122149
Summary: Libreoffice gives access to the same file with a
different UID/GID in Servermode
Product: LibreOffice
Version: 5.2.7.2 release
Hardware: x86-64 (AMD64)
OS: Linux (All)
Status: UNCONFIRMED
Severity: normal
Priority: medium
Component: LibreOffice
Assignee: libreoffice-bugs at lists.freedesktop.org
Reporter: darkangelofworld at gmail.com
We have the following Problem in this Case:
User 1 created a File on a Server (via Servermode) and edited it.
User 2 (logged in via Servermode) opens this File, changes somethings and the
File has changed with the identity from User 1.
So it happens that there are some Changes, User1 doesn't know about. But the
File shows his name. And the Security of this whole Process is unclear, if User
2 is able to work in the Name from User 1.
It just happens if you are logged in, in Servermode that User 2 gets the
foreign UID/GID.
Example:
> -rw-rw-r-- 1 User1 User1 101 9. Okt 21:42
> .~lock.beta-testing-fixing-progress.doc#
But User1 didn't worked on this file on this day
--
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.freedesktop.org/archives/libreoffice-bugs/attachments/20181217/495d28cc/attachment.html>
More information about the Libreoffice-bugs
mailing list