If I encrypt an Aspose PDF document, with a ‘userPassword’, but without specifying an ‘ownerPassword’, I am able to read the contents of the PDF without specifying any password. I would expect this not to be the case.
string path = @“c:\SamplePDF.pdf”;
string pathOutput = path.Replace(“.pdf”, “_encryptedCopy.pdf”);
using (System.IO.Stream dataStream = System.IO.File.OpenRead(path))
{
Aspose.Pdf.Document pdf1 = new Aspose.Pdf.Document(dataStream);
Aspose.Pdf.Facades.DocumentPrivilege privi = Aspose.Pdf.Facades.DocumentPrivilege.AllowAll; //Want to allow all functions once the file is opened
pdf1.Encrypt("Hello", string.Empty, privi, Aspose.Pdf.CryptoAlgorithm.AESx256, false); //The documentation makes it appear as though owner password is optional
pdf1.Save(pathOutput);
//At this point, if I try to open the file using Adobe Acrobat, it does indeed ask for a password (which is good)
}
//Now, try and read it without a pasword,
try
{
//I can read the text in the PDF document. I would not expect to be able to read the text here because I'm not specifying the password to open the file.
Aspose.Pdf.Document pdf1 = new Aspose.Pdf.Document(pathOutput);
Aspose.Pdf.Text.TextAbsorber textAbsorber = new Aspose.Pdf.Text.TextAbsorber();
pdf1.Pages.Accept(textAbsorber);
string extractedText = textAbsorber.Text;
}
catch (Exception ex)
{
}
The api documentation says ownerPassword is optional, in the text on this page it says "The Owner password, if set, ". This leads me to believe it’s optional.
So, my question is: If we leave the ownerPassword blank, does encryption occur? Because I can read the contents just fine without a password.