ikkeT
June 11, 2024, 8:10pm
1
I started to get this kinda Collabora warning for security. I can’t find what it means. Any ideas?
First there comes some popup saying there is security finding, and clicking it takes to this popup. It says “No issues found”, but still it sounds worrying.
jtr
June 11, 2024, 8:37pm
2
Where are you seeing this?
ikkeT
June 11, 2024, 8:49pm
3
When I open a doc from nextcloud, and collabora loads up, it has a banner saying Click to see security warnings. When I click it, this pops up. So it’s from collabora, I assume.
Same here since upgrading to the Collabora CODE Docker image collabora/code:24.04.4.1.1 (on NC 28.0.6 and App Nextcloud Office 8.3.7).
Edit: after a while the message changes (and gets redisplayed continously)
Same - just updated both so not sure which is causing the issue; Nextcloud 29.02 and collabora 24.04.4.1 9091043
bb77
June 12, 2024, 10:50am
7
I only get this message when I’m logged into an admin account, which imho shouldn’t be used for day-to-day work in the first place.
jtr
June 12, 2024, 1:32pm
8
This is a CO/CODE matter. Looks recently resolved to so I expect it’ll be in the next release:
opened 10:04AM - 12 Jun 24 UTC
closed 01:31PM - 12 Jun 24 UTC
**Describe the bug**
After upgrade to Collabora CODE 24.04.4.1.1, a popup appea… rs repeatedly while editing a document with the message "Check security warnings of your server" (screenshot 1). Opening the details, there are two possible outcomes: either there are no issues found but a notice "The is_admin user property is set" (screenshot 2) or an actual error "The is_admin user property is not set" (screenshot 3). See also [this post](https://help.nextcloud.com/t/security-warning-the-is-admin-user-property-is-set/194935) in the Nextcloud help forum.
**To Reproduce**
Steps to reproduce the behavior:
1. Check that Collabora CODE 24.0.4.4.1.1 is installed.
2. Open a text document using Collabora.
3. Start editing and wait for the popup to appear.
**Expected behavior**
No popups or at least no recurrence after checking their contents.
**Screenshots**
Screenshot 1:
Screenshot 2:
Screenshot 3:
**Client details:**
- OS: Debian bookworm
- Browser: Firefox
- Version: 115.11.0esr
- Device: Desktop
## Server details
**Operating system**:
Debian bookworm
**Web server:**
Apache/2.4.59 (Debian)
**Database:**
mariadb Ver 15.1 Distrib 10.11.6-MariaDB
**PHP version:**
PHP 8.2.18
**Nextcloud version:**
28.0.6
**Version of the richdocuments app**
8.3.7
**Version of Collabora Online**
collabora/code:24.04.4.1.1 Docker image
**Configuration of the richdocuments app**
```
{
"apps": {
"richdocuments": {
"disable_certificate_verification": "",
"enabled": "yes",
"installed_version": "8.3.7",
"public_wopi_url": "https:\/\/redacted.host.name",
"types": "prevent_group_restriction",
"wopi_allowlist": "172.0.0.0\/8",
"wopi_url": "https:\/\/redacted.host.name\/"
}
}
}
```
<details>
<summary>Logs</summary>
#### Nextcloud log (data/nextcloud.log)
```
(empty)
```
#### Browser log
```
...
Unknown server audit entry: certwarning bundle.js:24657:46
...
```
</details>
