Mailing Lists: Apple Mailing Lists
Image of Mac OS face in stamp
 
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re:Word 6. allows access to others +

> Subject: Word 6 Allows Access to Other's Documents
> To: email@hidden
> From: "Jim" <email@hidden>
> Date: Sun, 28 Jan 2001 22:51:52 -0800
>
> A student showed me a security hole I have in my network and I thought I
> would share it with others for their info
>
> The student logs in as a restricted user and launches Word 6 and goes
> under the File menu to Find File. He then chooses to search the
> sharepoint where his documents are located and leaves the file name he is
> searching for blank. He is then able to see all the other user folders on
> that sharepoint and all the documents in those folders. He is able to
> view all documents and DELETE them!
>
> I have a separate login server and a document server. I have the students
> divided into groups of 250 per sharepoint and MM is set to log in to the
> document server using a master account name that is unique to each group.
> This is the first problem I have found with this setup all year.
>
> The solution is to change the setup so that each user logs into the
> document server using his unique AFP user name and password. When this is
> done the problem dissappears. Needless to say, I spent my part of weekend
> converting 1200 users. Thank goodness for Applescripts that automate the
> changing of privileges on individual users.
>
> I don't know if this problem exists on Word 98 or Word 2001 but I thought
> others may want to know before their students. I am not sure yet how many
> documents were deleted but I have my backups ready!
>
> Jim Cartlidge
>
> Computer Resources Dept Head
> Brookswood Secondary School
> 20902 37A Ave
> Langley, BC, Canada
> V3A 5N2
>
> Telephone (604) 530-2141 Fax (604) 530-5132
>
> email@hidden
>

"Misery loves company" so I was delighted to see this post. We just found the exact same problem with network browsers,
Appleworks, Hyperstudio and any other program that gives browser access. I am glad that you found an answer, you make it
sound simple. I have a call into many Apple support people and so far no one has suggested that the answer is that simple.
What exactly did you do? I have the network shut down right now and need a secure solution.

Grateful for this group,
Sharon Lewallen
Network Manager
Swanton High School
206 Cherry Street
Swanton, Ohio 43558
419-825-1400
email@hidden



Visit the Apple Store online or at retail locations.
1-800-MY-APPLE

Contact Apple | Terms of Use | Privacy Policy

Copyright © 2007 Apple Inc. All rights reserved.