Bug 461564 - Dolphin displays thumbnails of files without read access
Summary: Dolphin displays thumbnails of files without read access
Status: REPORTED
Alias: None
Product: dolphin
Classification: Applications
Component: view-engine: general (show other bugs)
Version: 19.12.3
Platform: Ubuntu Linux
: NOR major
Target Milestone: ---
Assignee: Dolphin Bug Assignee
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2022-11-07 23:09 UTC by genetin
Modified: 2022-11-07 23:09 UTC (History)
1 user (show)

See Also:
Latest Commit:
Version Fixed In:

Attachments
Add an attachment

Note You need to log in before you can comment on or make changes to this bug.
Description genetin 2022-11-07 23:09:59 UTC 
Dolphin displays thumbnails of files, even if you do not have read access to these files.
I set the severity of this bug to "major" because there is a security issue : the content of a file that is not readable mustn't be displayed.

STEPS TO REPRODUCE
1. Create a file "a.jpg" and display its thumbnail in Dolphin
2. chmod 0 a.jpg
3. Refresh Dolphin display (or even quit Dolphin and restart it)

OBSERVED RESULT
The thumbnail of a.jpg is still displayed (although you have no right to see the content of the file).

EXPECTED RESULT
No thumbnail should be displayed for files you are not allowed to read.