Bug 141913

Summary: Bypass cell protection selection via Name box
Product: LibreOffice Reporter: Olivier Hallot <olivier.hallot>
Component: CalcAssignee: Not Assigned <libreoffice-bugs>
Status: NEW ---    
Severity: normal    
Priority: medium    
Version: Inherited From OOo   
Hardware: All   
OS: All   
See Also: https://bugs.documentfoundation.org/show_bug.cgi?id=139608
Whiteboard:
Crash report or crash signature: Regression By:
Bug Depends on:    
Bug Blocks: 107450    
Attachments: Sample file that shows how to bypass protected cell selection

Description Olivier Hallot 2021-04-26 11:19:30 UTC
Created attachment 171416 [details]
Sample file that shows how to bypass protected cell selection

Assuming that you are not to be allowed to set your cursor in the protected cell range if option "Select protected cells" is unchecked.

1) When it is unchecked, cursor movements to enter the protected range is forbidden: OK

2) Click on a protected cell will NOT place the cursor at the desired place: OK

3) Type a range reference inside the protected area in the Name box (upper left). The range is selected, copy action is possible. NOT OK. 


In the sample file attached, the orange range is protected and selection not allowed (no password). 
Insert A1:A10 in the Name box to get the range A1:A10 selected anyway. Copy and paste elsewhere to have the contents copied (with the protect flag enabled, by the way).
Comment 1 Olivier Hallot 2021-04-26 11:21:39 UTC
Protection is enabled in Tools - Protect Sheet


Version: 7.2.0.0.alpha0+ / LibreOffice Community
Build ID: 41145efffe9d5af358a52b9e114bb01b98b3d7c2
CPU threads: 16; OS: Linux 5.8; UI render: default; VCL: x11
Locale: en-US (en_US.UTF-8); UI: en-US
Calc: threaded
Comment 2 Timur 2021-04-26 13:36:26 UTC
Repro 7.2+ abd OO. In OO, copy was also possible via mouse selection, which was later fixed, but not via Name box selection.
Comment 3 Timur 2021-04-26 14:05:59 UTC
Copy via mouse was fixed in 4.4 in range https://cgit.freedesktop.org/libreoffice/core/log/?qt=range&q=2e3d7c742a1c1253c4bb2af1c3d1b1506d2e7af4..0771823d80abadf8e7f2ccc078f3f9e2c277f8a5. 
Couldn't bisect further in 44max.
Comment 4 QA Administrators 2023-04-27 03:24:21 UTC Comment hidden (obsolete)
Comment 5 Stéphane Guillou (stragu) 2023-07-26 22:07:49 UTC
Still reproducible in:

Version: 24.2.0.0.alpha0+ (X86_64) / LibreOffice Community
Build ID: 24d0a62bd75b9a895c419aa165da648ab18f134d
CPU threads: 8; OS: Linux 5.15; UI render: default; VCL: gtk3
Locale: en-AU (en_AU.UTF-8); UI: en-US
Calc: threaded