Issue 128510 - Menus or buttons added after OXT installed, denies macro running (security alert warning)
Summary: Menus or buttons added after OXT installed, denies macro running (security al...
Status: CLOSED FIXED_WITHOUT_CODE
Alias: None
Product: App Dev
Classification: Unclassified
Component: scripting (show other issues)
Version: 4.1.12
Hardware: All All
: P5 (lowest) Normal
Target Milestone: ---
Assignee: AOO issues mailing list
QA Contact:
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2022-05-23 07:56 UTC by oooforum (fr)
Modified: 2022-05-31 17:11 UTC (History)
0 users

See Also:
Issue Type: DEFECT
Latest Confirmation in: ---
Developer Difficulty: ---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this issue.
Description oooforum (fr) 2022-05-23 07:56:29 UTC 
Before, install any OXT of your choice like:
- MRI https://extensions.openoffice.org/en/project/mri-uno-object-inspection-tool
- GgCalendar https://forum.openoffice.org/en/forum/viewtopic.php?t=105343
- PicCom https://extensions.openoffice.org/en/project/set-picture-comment

Steps to reproduce
1) open a new blank document (or a document containing no macro)
2) invoke OXT with:
- MRI via menu Tools > Add-Ons > MRI
- GgCalendar via Toolbar > buttons
- PicCom via menu Insert > Picture > As comment
AOO 4.1.12 displays a security warning if the "macro security" level is "Medium", "High" or "Very high".
AOO 4.1.11 - no security warnings  - the "macro security" level doesn't matter
Comment 1 oooforum (fr) 2022-05-31 12:24:59 UTC 
The issue comes from new security policy with macro.

For your OXTs in addon.xcu, you don't call macro with vnd... string.
But you must use this syntax: 
<prop oor:name="URL" oor:type="xs:string">
 <value>macro:///OxtName.ModuleName.script</value>
</prop>
And all fine