Home  |  Blogs  |  Forums
 
Office Live Workspaces Community Forums

You can easily Login to Workspace without credentials, when selecting Microsoft Word document from the recently used file from the File menu.

Last post 03-26-2008 6:46 AM by Challa Prabhu. 3 replies.
Page 1 of 1 (4 items)
Sort Posts: Previous Next
03-25-2008 8:04 AM

You can easily Login to Workspace without credentials, when selecting Microsoft Word document from the recently used file from the File menu.

Locked Contact

Scenario: 

Imagine that you have accessed your document from the Microsoft Office Live Workspace for editing using you Microsoft Word application. Now, the file you have accessed is displayd in the "File menu" as recently used file. Now signout from the  Microsoft Office Live workspace and click on the filename - that has a http://..... to your workspace - from the  File menu, which was recently used. The Microsoft Word document opens.

Security breach: By selecting the recently used file from the "File" menu in the Microsoft Word application, any one can access the content.


Challa Prabhu
Microsoft MVP(India)

  • Post Points: 35
03-25-2008 6:10 PM In reply to
  • Diamond Tim
  • Joined on 03-02-2008
  • Shakey Town, USA
  • Posts 2
  • Points 10

Re: You can easily Login to Workspace without credentials, when selecting Microsoft Word document from the recently used file from the File menu.

That could certainly prove to be an issue .....

  • Post Points: 5
03-25-2008 6:31 PM In reply to
  • Smith
  • Joined on 12-14-2007
  • Posts 67
  • Points 1,435

Re: You can easily Login to Workspace without credentials, when selecting Microsoft Word document from the recently used file from the File menu.

This is not correct.  First, let me explain the following:

Clicking the "sign out" link in the browser signs you out of the browser session, not the client session.  If you are interested in terminating the server connection when editing an online document from within Office, please close the Office client.

Now, if there is a case that the user is still authenticated in subsequent attempts it is because the user had selected "remember my password" at some point in the past on the Windows LiveID dialog.  Please use the Office Live Add-in to "Sign in as another user" to eliminate this.

Office Live Workspace team
  • Post Points: 20
03-26-2008 6:46 AM In reply to

Re: You can easily Login to Workspace without credentials, when selecting Microsoft Word document from the recently used file from the File menu.

Hi

I don't select  "remember my password" check box any time for any credentials. Therefore no assumptions please.


Challa Prabhu
Microsoft MVP (India)

Filed under: ,
  • Post Points: 5
Page 1 of 1 (4 items)
© 2007 Microsoft Corporation. All rights reserved. Legal  |  Trademarks  |  Privacy  |  Code of Conduct