Issue 113806 - Cell protection bypassed when "moving" other cell data
Summary: Cell protection bypassed when "moving" other cell data
Status: CLOSED DUPLICATE of issue 107634
Alias: None
Product: Calc
Classification: Application
Component: ui (show other issues)
Version: OOO320m18
Hardware: PC Windows 7
: P3 Trivial (vote)
Target Milestone: ---
Assignee: spreadsheet
QA Contact: issues@sc
Depends on:
Blocks: 121425
  Show dependency tree
Reported: 2010-08-11 14:55 UTC by christopher_schultz
Modified: 2012-12-06 11:14 UTC (History)
2 users (show)

See Also:
Issue Type: DEFECT
Latest Confirmation in: ---
Developer Difficulty: ---

Simple spreadsheet with cell protection (no password) and "disturbed" formula in C1 (7.42 KB, application/vnd.oasis.opendocument.spreadsheet)
2010-08-11 15:27 UTC, christopher_schultz
no flags Details

Note You need to log in before you can comment on or make changes to this issue.
Description christopher_schultz 2010-08-11 14:55:56 UTC
1. Create a new spreadsheet
2. Enter a few values in columns A and B
   1   1
   2   2
   3   3
   4   4

3. Enter this formula in cell C1:
   =A1 + A2
4. Fill the formula in C1 down to C4
5. Select all cells, right-click, "Format Cells...", disable cell protection
6. Select all cells in column C, "Format Cells...", enable cell protection
7. "Protect Sheet", enter password (or none)
8. Confirm cell protection by attempting to type into cell C1 (works)
9. Select cells A1 - B1, drag cell both cells to below line 4

RESULT:   Formula in C1 has changed to accommodate the relocated cells.
EXPECTED: Formula in C1 is protected from alteration, either by allowing the
drag-and-drop operation and ignoring the formula change, prohibiting the
drag-and-drop operation, or (my preference) alerting the user of the situation
and offering them the previous two choices.

This "trick" could be used to subvert the protection of a cell formula to use
data that is hidden elsewhere on the sheet (in my example, cells A6-B6, which is
where I dropped the two cells I moved), while presenting false data in the
expected data location (cells A1 - B1).

Although it is trivial to verify that the formulas are pointing to alternative
locations for a single cell, verifying many formulas in a complex spreadsheet is
not reasonable and I believe this problem should be fixed for this reason.
Comment 1 christopher_schultz 2010-08-11 15:27:48 UTC
Created attachment 71043 [details]
Simple spreadsheet with cell protection (no password) and "disturbed" formula in C1
Comment 2 christopher_schultz 2010-08-11 16:48:12 UTC
Oops, step #3 should be this formula:

 = A1 + B1
Comment 3 Rob Weir 2012-11-11 20:47:55 UTC
Duplicate of earlier reported 107634

*** This issue has been marked as a duplicate of issue 107634 ***
Comment 4 binguo 2012-12-06 11:13:22 UTC
Verified on Aoo_Trunk_20121203.1303 Rev.1413470
the drag-and-drop operation is prohibitted in step 9 which is the same as that in MS Excel. so I agree this bug is dup with 107634.
Comment 5 binguo 2012-12-06 11:14:09 UTC
Close it.