<html>
    <head>
      <base href="https://bugs.documentfoundation.org/">
    </head>
    <body><table border="1" cellspacing="0" cellpadding="8">
        <tr>
          <th>Bug ID</th>
          <td><a class="bz_bug_link 
          bz_status_UNCONFIRMED "
   title="UNCONFIRMED - Disabled and locked down configuration items can be "runtime enabled""
   href="https://bugs.documentfoundation.org/show_bug.cgi?id=132715">132715</a>
          </td>
        </tr>

        <tr>
          <th>Summary</th>
          <td>Disabled and locked down configuration items can be "runtime enabled"
          </td>
        </tr>

        <tr>
          <th>Product</th>
          <td>LibreOffice
          </td>
        </tr>

        <tr>
          <th>Version</th>
          <td>unspecified
          </td>
        </tr>

        <tr>
          <th>Hardware</th>
          <td>All
          </td>
        </tr>

        <tr>
          <th>OS</th>
          <td>All
          </td>
        </tr>

        <tr>
          <th>Status</th>
          <td>UNCONFIRMED
          </td>
        </tr>

        <tr>
          <th>Severity</th>
          <td>normal
          </td>
        </tr>

        <tr>
          <th>Priority</th>
          <td>medium
          </td>
        </tr>

        <tr>
          <th>Component</th>
          <td>LibreOffice
          </td>
        </tr>

        <tr>
          <th>Assignee</th>
          <td>libreoffice-bugs@lists.freedesktop.org
          </td>
        </tr>

        <tr>
          <th>Reporter</th>
          <td>ronny.standtke@gmx.net
          </td>
        </tr></table>
      <p>
        <div>
        <pre>Hi all

We are using LibreOffice in exam situations and need to disable some features.
We already created a Debian package that contains the corresponding
configuration files, see:
<a href="https://github.com/imedias/lernstick-libreoffice-lockdown">https://github.com/imedias/lernstick-libreoffice-lockdown</a>

When we disable a configuration item and add oor:finalized="true" it can't be
enabled by our users permanently, i.e. after restarting LO the features are
disabled again. So far so good.

The problem for the exam situation is that nothing prevents the students to
just enable the features and use them right away. This way it defeats the whole
point of locking down the features in the first place.

Here is the file with the features we want to disable:
<a href="https://github.com/imedias/lernstick-libreoffice-lockdown/blob/master/usr/lib/libreoffice/share/registry/data/Lernstick-Lockdown-Items.xcu">https://github.com/imedias/lernstick-libreoffice-lockdown/blob/master/usr/lib/libreoffice/share/registry/data/Lernstick-Lockdown-Items.xcu</a>

This issue is probably related to <a class="bz_bug_link 
          bz_status_NEW "
   title="NEW - Finalized configuration items set in Windows Registry can be overridden by user and can cause crashes"
   href="show_bug.cgi?id=89501">bug #89501</a>, <a class="bz_bug_link 
          bz_status_NEW "
   title="NEW - Expert Configuration dialog does not respect finalized configuration values"
   href="show_bug.cgi?id=104005">bug #104005</a> and <a class="bz_bug_link 
          bz_status_NEW "
   title="NEW - calc/writer finalized configuration items editable in UI"
   href="show_bug.cgi?id=107671">bug #107671</a>.

Thank you for the otherwise wonderful LibreOffice!
Ronny</pre>
        </div>
      </p>


      <hr>
      <span>You are receiving this mail because:</span>

      <ul>
          <li>You are the assignee for the bug.</li>
      </ul>
    </body>
</html>