Lock Security - Passcode and Passphrase input field: selectall/cut/copy entry should not be available

Bug #1438976 reported by Wenfang Si
10
This bug affects 2 people
Affects Status Importance Assigned to Milestone
ubuntu-system-settings (Ubuntu)
In Progress
High
Unassigned
ubuntu-ui-toolkit (Ubuntu)
Fix Released
High
Cris Dywan
Vivid
New
Undecided
Unassigned

Bug Description

r155, vivid-proposed channel

Steps:
1) Enter "Security & Privacy -> Phone locking -> Lock security"
2) Select "4-digit passcode" or "Passphrase"
3) In the "Choose/Confirm passcode/passfhrase" fileds, input several charactors, and hold down on field

Result:
selectall/cut/copy are seen

Expected:
These edit operations should not be available

Related branches

Revision history for this message
Sebastien Bacher (seb128) wrote :

Thank you for your bug report, I had a look but I'm unsure the sdk provides a way to do that at the moment...

Changed in ubuntu-system-settings (Ubuntu):
importance: Undecided → High
status: New → Confirmed
Revision history for this message
Cris Dywan (kalikiana) wrote :

We have bug 1424588 to implement a context menu API. I'd prefer to expose an API rather than simply the internal TextInputPopover we have, and that would allow fixing this bug by easily hiding certain actions (or adding new ones even).

Cris Dywan (kalikiana)
Changed in ubuntu-ui-toolkit (Ubuntu):
assignee: nobody → Christian Dywan (kalikiana)
status: New → Confirmed
importance: Undecided → High
Revision history for this message
Zsombor Egri (zsombi) wrote :

ATM we don't have any possibilities to drive this from outside. We need an API which can tell what clipboard operations are allowed and which don't.

Revision history for this message
Pat McGowan (pat-mcgowan) wrote :

I assume we can override the select/copy/paste methods at least in this case

Revision history for this message
Cris Dywan (kalikiana) wrote :

If by override you mean replace it with a custom popover, yes that is possible if you want to go for a hotfix. Depends on how urgent this is.

Revision history for this message
Matthew Paul Thomas (mpt) wrote :

Is there *ever* a case where a password should be hidden by default but should still be copyable? If not, this is purely a toolkit bug, not a System Settings bug.

Revision history for this message
Cris Dywan (kalikiana) wrote :

Virtual wallets such as LastPass and SeaHorse rely on being able to make passwords visible so you can copy them. Many apps these days have a "show password" button in or next to text input fields.
Although arguably this can be implemented by unsetting the password mode. Or a "show password" button could be part of TextField - which personally I'd find very useful.

Cris Dywan (kalikiana)
Changed in ubuntu-ui-toolkit (Ubuntu):
status: Confirmed → In Progress
Revision history for this message
Launchpad Janitor (janitor) wrote :

This bug was fixed in the package ubuntu-ui-toolkit - 1.3.1517+15.10.20150523-0ubuntu1

---------------
ubuntu-ui-toolkit (1.3.1517+15.10.20150523-0ubuntu1) wily; urgency=medium

  [ Christian Dywan ]
  * Expose textDocument of TextField. Fixes LP: #1392276
  * Unset GRID_UNIT_PX before checking default value. Fixes LP: #1457421
  * No cutting and copying of passwords. Fixes LP: #1438976
  * Implement new API tool based on qmlplugindump producing JSON.
    Fixes LP: #1187010

  [ Leo Arias ]
  * Make explicit the dependency on upstart for the autopilot helpers.

  [ Timo Jyrinki ]
  * uitk_test_plan.sh: Switch to vivid-overlay & wily instead of rtm-14.09 &
    vivid. Fixes LP: #1457015.

 -- CI Train Bot <email address hidden> Sat, 23 May 2015 17:24:43 +0000

Changed in ubuntu-ui-toolkit (Ubuntu):
status: In Progress → Fix Released
Changed in ubuntu-system-settings (Ubuntu):
status: Confirmed → In Progress
Changed in ubuntu-system-settings (Ubuntu):
status: In Progress → Fix Committed
status: Fix Committed → In Progress
Revision history for this message
Matthew Paul Thomas (mpt) wrote :

I’m not sure why this report is still open for System Settings, since it has a merged branch there and r349 shows no Cut/Copy in password fields. But just in case … The original report and (apparently) the toolkit branch disables “Select All”, which is incorrect. There is no reason to disable “Select All” for a password field — you can select the field contents manually anyway — and GTK, Android, and iOS all allow it.

(Purely coincidentally, halfway through writing this comment I had to lock the screen, and returned to find that a stuck key had typed thousands of characters into the password field. Because the field did not let me Select All for deletion, I had to restart the PC.)

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.