tdf#158090: Do not auto-reject SignatureState::BROKEN in ALWAYS_EXECUTE case
commit3aa188ba92d437e15eda13a63bafa1382d028f08
authorMike Kaganski <mike.kaganski@collabora.com>
Wed, 8 Nov 2023 08:57:17 +0000 (8 11:57 +0300)
committerMike Kaganski <mike.kaganski@collabora.com>
Thu, 7 Dec 2023 16:42:08 +0000 (7 19:42 +0300)
tree61695768b33a1154427b9e6d55337f4bb7483113
parentb53835f93e3c29c81ad6b02bc4e2f11fcd092573
tdf#158090: Do not auto-reject SignatureState::BROKEN in ALWAYS_EXECUTE case

It doesn't make sense to silently reject it here, but e.g., allow the
confirmation dialog for SignatureState::INVALID case; also, it was only
possible to get a silent execution of BROKEN-signature macros (in Low
security mode) vs. silent reject (in all higher modes) - which was not
good security-wise. Now it will result in the usual confirmation dialog
in Medium security mode.

Both BROKEN and INVALID signature states are made sure to not allow
automatically depending on the Windows Security Zone.

Change-Id: I41b0fc96b6bd00e960ae612e79fa1f0f1e06a069
Reviewed-on: https://gerrit.libreoffice.org/c/core/+/159153
Tested-by: Jenkins
Reviewed-by: Mike Kaganski <mike.kaganski@collabora.com>
Reviewed-on: https://gerrit.libreoffice.org/c/core/+/159275
Reviewed-by: Xisco Fauli <xiscofauli@libreoffice.org>
sfx2/source/doc/docmacromode.cxx