You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@openoffice.apache.org by Johnny Rosenberg <gu...@gmail.com> on 2016/04/14 23:56:08 UTC

Default behaviour with links to other documents

I have a few spreadsheet documents that contain one or more links to other
documents. Every time I open them I get the very annoying question about
whether I want the links to be updated or not.

Is there a way I can set a default behaviour for that? I mean the current
behaviour seems to be ”ask the user”, and I want it do be either ”yes” or
”no”, just so I don't need to get annoyed by that irritating dialogue every
time I open such a document (which I do daily).

And if I select ”yes” or ”no” as default behaviour, I don't want to see any
dialogue windows about it at all from there on. No ”Your links were updated
successfully”, nor ”Your links were not updated”.


Kind regards

Johnny Rosenberg

Re: Default behaviour with links to other documents

Posted by Johnny Rosenberg <gu...@gmail.com>.
2016-04-16 21:36 GMT+02:00 Andrea Pescetti <pe...@apache.org>:

> Johnny Rosenberg wrote:
>
>> 2016-04-16 10:05 GMT+02:00 Andrea Pescetti:
>>
>>> It is not ignored but, due to the possible security implications, it has
>>> no effect unless you also lower the security level (which is improperly
>>> called "Macro security level" but is more comprehensive). Yes, this
>>> should
>>> be documented better...
>>>
>> Which security level is the highest that don't ignore that setting?
>>
>
> As it is implemented now, the minimum level. See
> https://bz.apache.org/ooo/show_bug.cgi?id=126641#c3
> (same link Dennis posted).


Oh, sorry. My bad.

Thanks.


Kind regards

Johnny Rosenberg



>
>
> Regards,
>   Andrea.
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: users-unsubscribe@openoffice.apache.org
> For additional commands, e-mail: users-help@openoffice.apache.org
>
>

Re: Default behaviour with links to other documents

Posted by Andrea Pescetti <pe...@apache.org>.
Johnny Rosenberg wrote:
> 2016-04-16 10:05 GMT+02:00 Andrea Pescetti:
>> It is not ignored but, due to the possible security implications, it has
>> no effect unless you also lower the security level (which is improperly
>> called "Macro security level" but is more comprehensive). Yes, this should
>> be documented better...
> Which security level is the highest that don't ignore that setting?

As it is implemented now, the minimum level. See
https://bz.apache.org/ooo/show_bug.cgi?id=126641#c3
(same link Dennis posted).

Regards,
   Andrea.

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@openoffice.apache.org
For additional commands, e-mail: users-help@openoffice.apache.org


Re: Default behaviour with links to other documents

Posted by Johnny Rosenberg <gu...@gmail.com>.
2016-04-16 10:05 GMT+02:00 Andrea Pescetti <pe...@apache.org>:

> Johnny Rosenberg wrote:
>
>> But why is ”Always” ignored? Wouldn't it be better to let ”On demand” be
>> the default option? At least I think so. If an options is ignored, it
>> should either be corrected or removed.
>>
>
> It is not ignored but, due to the possible security implications, it has
> no effect unless you also lower the security level (which is improperly
> called "Macro security level" but is more comprehensive). Yes, this should
> be documented better...
>

Which security level is the highest that don't ignore that setting?


>
> Regards,
>   Andrea.
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: users-unsubscribe@openoffice.apache.org
> For additional commands, e-mail: users-help@openoffice.apache.org
>
>

Re: Default behaviour with links to other documents

Posted by Andrea Pescetti <pe...@apache.org>.
Johnny Rosenberg wrote:
> But why is ”Always” ignored? Wouldn't it be better to let ”On demand” be
> the default option? At least I think so. If an options is ignored, it
> should either be corrected or removed.

It is not ignored but, due to the possible security implications, it has 
no effect unless you also lower the security level (which is improperly 
called "Macro security level" but is more comprehensive). Yes, this 
should be documented better...

Regards,
   Andrea.

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@openoffice.apache.org
For additional commands, e-mail: users-help@openoffice.apache.org


Re: Default behaviour with links to other documents

Posted by Johnny Rosenberg <gu...@gmail.com>.
2016-04-15 1:42 GMT+02:00 Dennis E. Hamilton <de...@acm.org>:

> This behavior is a result of a security-vulnerability mitigation that was
> introduced in Apache OpenOffice 4.1.2.  See
> <http://www.openoffice.org/security/cves/CVE-2015-4551.html>.
>
> The remedy that was used is not very nuanced.  I believe that the Tools >
> Options > OpenOffice Calc > General > Updating options are ignored and "On
> request" is performed instead of "Always."
>
> You can verify that.
>

Yes, Always was ticked in my case, but it was ignored. I selected Never and
I got rid of the dialogue, however with links not updated… at least better
than before. I suppose I can update them manually when needed, right?
But why is ”Always” ignored? Wouldn't it be better to let ”On demand” be
the default option? At least I think so. If an options is ignored, it
should either be corrected or removed.





>
> See Bugzilla Issue 126641,
> <https://bz.apache.org/ooo/show_bug.cgi?id=126641>.
>
> If you are careful to use the workaround only when working with
> spreadsheets of your own creation and not obtained from others, the
> adjustment that Andrea Pescetti describes might work for you, even though
> it talks about macros.  Try it.
>

I'll have a look at it. And yes, almost everything spreadsheet are made by
me for me and nobody else, and hopefully I know what I'm doing…


Kind regards

Johnny Rosenberg



>
> With regard to the notification about whether updating from links was
> successful or not, we probably would require that to be there, simply
> because it is the only way someone might see that unexpected link updating
> is happening when part of a covert action.  That should be treated as a
> separate issue for further consideration.  That is not going to happen so
> easily.
>
>  - Dennis
>
> > -----Original Message-----
> > From: Johnny Rosenberg [mailto:gurus.knugum@gmail.com]
> > Sent: Thursday, April 14, 2016 14:56
> > To: users@openoffice.apache.org
> > Subject: Default behaviour with links to other documents
> >
> > I have a few spreadsheet documents that contain one or more links to
> > other
> > documents. Every time I open them I get the very annoying question about
> > whether I want the links to be updated or not.
> >
> > Is there a way I can set a default behaviour for that? I mean the
> > current
> > behaviour seems to be ”ask the user”, and I want it do be either ”yes”
> > or
> > ”no”, just so I don't need to get annoyed by that irritating dialogue
> > every
> > time I open such a document (which I do daily).
> >
> > And if I select ”yes” or ”no” as default behaviour, I don't want to see
> > any
> > dialogue windows about it at all from there on. No ”Your links were
> > updated
> > successfully”, nor ”Your links were not updated”.
> >
> >
> > Kind regards
> >
> > Johnsenberg
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: users-unsubscribe@openoffice.apache.org
> For additional commands, e-mail: users-help@openoffice.apache.org
>
>

RE: Default behaviour with links to other documents

Posted by "Dennis E. Hamilton" <de...@acm.org>.
This behavior is a result of a security-vulnerability mitigation that was introduced in Apache OpenOffice 4.1.2.  See 
<http://www.openoffice.org/security/cves/CVE-2015-4551.html>.

The remedy that was used is not very nuanced.  I believe that the Tools > Options > OpenOffice Calc > General > Updating options are ignored and "On request" is performed instead of "Always."

You can verify that.  

See Bugzilla Issue 126641, 
<https://bz.apache.org/ooo/show_bug.cgi?id=126641>.  

If you are careful to use the workaround only when working with spreadsheets of your own creation and not obtained from others, the adjustment that Andrea Pescetti describes might work for you, even though it talks about macros.  Try it.

With regard to the notification about whether updating from links was successful or not, we probably would require that to be there, simply because it is the only way someone might see that unexpected link updating is happening when part of a covert action.  That should be treated as a separate issue for further consideration.  That is not going to happen so easily.

 - Dennis

> -----Original Message-----
> From: Johnny Rosenberg [mailto:gurus.knugum@gmail.com]
> Sent: Thursday, April 14, 2016 14:56
> To: users@openoffice.apache.org
> Subject: Default behaviour with links to other documents
> 
> I have a few spreadsheet documents that contain one or more links to
> other
> documents. Every time I open them I get the very annoying question about
> whether I want the links to be updated or not.
> 
> Is there a way I can set a default behaviour for that? I mean the
> current
> behaviour seems to be ”ask the user”, and I want it do be either ”yes”
> or
> ”no”, just so I don't need to get annoyed by that irritating dialogue
> every
> time I open such a document (which I do daily).
> 
> And if I select ”yes” or ”no” as default behaviour, I don't want to see
> any
> dialogue windows about it at all from there on. No ”Your links were
> updated
> successfully”, nor ”Your links were not updated”.
> 
> 
> Kind regards
> 
> Johnsenberg


---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@openoffice.apache.org
For additional commands, e-mail: users-help@openoffice.apache.org