[dolphin] [Bug 461564] New: Dolphin displays thumbnails of files without read access

bugzilla_noreply at kde.org bugzilla_noreply at kde.org
Mon Nov 7 23:09:59 GMT 2022


https://bugs.kde.org/show_bug.cgi?id=461564

            Bug ID: 461564
           Summary: Dolphin displays thumbnails of files without read
                    access
    Classification: Applications
           Product: dolphin
           Version: 19.12.3
          Platform: Ubuntu
                OS: Linux
            Status: REPORTED
          Severity: major
          Priority: NOR
         Component: view-engine: general
          Assignee: dolphin-bugs-null at kde.org
          Reporter: genetin at gmail.com
                CC: kfm-devel at kde.org
  Target Milestone: ---

Dolphin displays thumbnails of files, even if you do not have read access to
these files.
I set the severity of this bug to "major" because there is a security issue :
the content of a file that is not readable mustn't be displayed.

STEPS TO REPRODUCE
1. Create a file "a.jpg" and display its thumbnail in Dolphin
2. chmod 0 a.jpg
3. Refresh Dolphin display (or even quit Dolphin and restart it)

OBSERVED RESULT
The thumbnail of a.jpg is still displayed (although you have no right to see
the content of the file).

EXPECTED RESULT
No thumbnail should be displayed for files you are not allowed to read.

-- 
You are receiving this mail because:
You are on the CC list for the bug.


More information about the kfm-devel mailing list