Mailing Lists: Apple Mailing Lists
Image of Mac OS face in stamp
 
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: Word 6. allows access to others +

Sharon Lewallen wrote:
>
> > Subject: Word 6 Allows Access to Other's Documents
> > To: email@hidden
> > From: "Jim" <email@hidden>
> > Date: Sun, 28 Jan 2001 22:51:52 -0800
> >
> > A student showed me a security hole I have in my network and I thought I
> > would share it with others for their info
> >
> > The student logs in as a restricted user and launches Word 6 and goes
> > under the File menu to Find File. He then chooses to search the
> > sharepoint where his documents are located and leaves the file name he is
> > searching for blank. He is then able to see all the other user folders on
> > that sharepoint and all the documents in those folders. He is able to
> > view all documents and DELETE them!
> >
> > I have a separate login server and a document server. I have the students
> > divided into groups of 250 per sharepoint and MM is set to log in to the
> > document server using a master account name that is unique to each group.
> > This is the first problem I have found with this setup all year.
> >
> > The solution is to change the setup so that each user logs into the
> > document server using his unique AFP user name and password. When this is
> > done the problem dissappears. Needless to say, I spent my part of weekend
> > converting 1200 users. Thank goodness for Applescripts that automate the
> > changing of privileges on individual users.
> >
> > I don't know if this problem exists on Word 98 or Word 2001 but I thought
> > others may want to know before their students. I am not sure yet how many
> > documents were deleted but I have my backups ready!
> >
> > Jim Cartlidge
> >
> > Computer Resources Dept Head
> > Brookswood Secondary School
> > 20902 37A Ave
> > Langley, BC, Canada
> > V3A 5N2
> >
> > Telephone (604) 530-2141 Fax (604) 530-5132
> >
> > email@hidden
> >
>
> "Misery loves company" so I was delighted to see this post. We just found the exact same problem with network browsers,
> Appleworks, Hyperstudio and any other program that gives browser access. I am glad that you found an answer, you make it
> sound simple. I have a call into many Apple support people and so far no one has suggested that the answer is that simple.
> What exactly did you do? I have the network shut down right now and need a secure solution.
>
> Grateful for this group,
> Sharon Lewallen
> Network Manager
> Swanton High School
> 206 Cherry Street
> Swanton, Ohio 43558
> 419-825-1400
> email@hidden
> _______________________________________________
> macintosh-manager mailing list
> email@hidden
> http://www.lists.apple.com/mailman/listinfo/macintosh-manager

The only time I've had security weaknesses come up is in having to have
the Security Bypass Extension installed, to override security built into
Macintosh Manager (client) 1.3. All of my iMacs and iBooks are 9.0.4 and
are normally very secure, except that if you start browsing the server's
HD with something like Internet Explorer or Netscape, you can start
viewing other people's files. And since I need the bypass to keep STAR
Reading and Accelerated Reader working (the other applications folder
trick did not work for me for those two programs), I'm kind of stuck. We
don't have any Microsoft Office applications, but I haven't honestly
tried really accessing anyone else's stuff under any other program either.

-John

John Buell
Technology Assistant
Clarendon Hills Middle School
Clarendon Hills, IL

References: 
 >Re:Word 6. allows access to others + (From: Sharon Lewallen <email@hidden>)



Visit the Apple Store online or at retail locations.
1-800-MY-APPLE

Contact Apple | Terms of Use | Privacy Policy

Copyright © 2007 Apple Inc. All rights reserved.