[Libreoffice-bugs] [Bug 132715] New: Disabled and locked down configuration items can be "runtime enabled"

[bugzilla-daemon at bugs.documentfoundation.org]

https://bugs.documentfoundation.org/show_bug.cgi?id=132715

            Bug ID: 132715
           Summary: Disabled and locked down configuration items can be
                    "runtime enabled"
           Product: LibreOffice
           Version: unspecified
          Hardware: All
                OS: All
            Status: UNCONFIRMED
          Severity: normal
          Priority: medium
         Component: LibreOffice
          Assignee: libreoffice-bugs at lists.freedesktop.org
          Reporter: ronny.standtke at gmx.net

Hi all

We are using LibreOffice in exam situations and need to disable some features.
We already created a Debian package that contains the corresponding
configuration files, see:
https://github.com/imedias/lernstick-libreoffice-lockdown

When we disable a configuration item and add oor:finalized="true" it can't be
enabled by our users permanently, i.e. after restarting LO the features are
disabled again. So far so good.

The problem for the exam situation is that nothing prevents the students to
just enable the features and use them right away. This way it defeats the whole
point of locking down the features in the first place.

Here is the file with the features we want to disable:
https://github.com/imedias/lernstick-libreoffice-lockdown/blob/master/usr/lib/libreoffice/share/registry/data/Lernstick-Lockdown-Items.xcu

This issue is probably related to bug #89501, bug #104005 and bug #107671.

Thank you for the otherwise wonderful LibreOffice!
Ronny

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.freedesktop.org/archives/libreoffice-bugs/attachments/20200505/29a97ddb/attachment.htm>