<html>
<head>
<base href="https://bugs.documentfoundation.org/">
</head>
<body><table border="1" cellspacing="0" cellpadding="8">
<tr>
<th>Bug ID</th>
<td><a class="bz_bug_link
bz_status_UNCONFIRMED "
title="UNCONFIRMED - Libreoffice gives access to the same file with a different UID/GID in Servermode"
href="https://bugs.documentfoundation.org/show_bug.cgi?id=122149">122149</a>
</td>
</tr>
<tr>
<th>Summary</th>
<td>Libreoffice gives access to the same file with a different UID/GID in Servermode
</td>
</tr>
<tr>
<th>Product</th>
<td>LibreOffice
</td>
</tr>
<tr>
<th>Version</th>
<td>5.2.7.2 release
</td>
</tr>
<tr>
<th>Hardware</th>
<td>x86-64 (AMD64)
</td>
</tr>
<tr>
<th>OS</th>
<td>Linux (All)
</td>
</tr>
<tr>
<th>Status</th>
<td>UNCONFIRMED
</td>
</tr>
<tr>
<th>Severity</th>
<td>normal
</td>
</tr>
<tr>
<th>Priority</th>
<td>medium
</td>
</tr>
<tr>
<th>Component</th>
<td>LibreOffice
</td>
</tr>
<tr>
<th>Assignee</th>
<td>libreoffice-bugs@lists.freedesktop.org
</td>
</tr>
<tr>
<th>Reporter</th>
<td>darkangelofworld@gmail.com
</td>
</tr></table>
<p>
<div>
<pre>We have the following Problem in this Case:
User 1 created a File on a Server (via Servermode) and edited it.
User 2 (logged in via Servermode) opens this File, changes somethings and the
File has changed with the identity from User 1.
So it happens that there are some Changes, User1 doesn't know about. But the
File shows his name. And the Security of this whole Process is unclear, if User
2 is able to work in the Name from User 1.
It just happens if you are logged in, in Servermode that User 2 gets the
foreign UID/GID.
Example:
<span class="quote">> -rw-rw-r-- 1 User1 User1 101 9. Okt 21:42
> .~lock.beta-testing-fixing-progress.doc#</span >
But User1 didn't worked on this file on this day</pre>
</div>
</p>
<hr>
<span>You are receiving this mail because:</span>
<ul>
<li>You are the assignee for the bug.</li>
</ul>
</body>
</html>