1680300 - After closing master password prompt, it shows account and all messages without any protection

Status: RESOLVED DUPLICATE of bug 1566458

(Thunderbird :: Untriaged, defect)

Description

[Michele]

User Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/87.0.4280.66 Safari/537.36

Steps to reproduce:

1. In windows 10 (but similar in ubuntu 20.04), I open thunderbird, which has a master password protection set
2. Popup with the password request appears
3. I leave the password field blank and I close the password prompt with the "X" in the upper right

Actual results:

The user account with all folders and messages opens, and a new password prompt appears, I close again the password prompt with the "X" in the upper right, and now I can open and read all messages, if I change folder the password prompt reappears, but closing it I can still read the messages of the selected folder

Expected results:

It should not be possible to view and open the emails if a password has not been entered or if the propmt is closed leaving blank

Comment 1

[Magnus Melin [:mkmelin]]

Please use the OS locking features.