Creating, editing and deleting need the office password. It is checked on the server; the browser never holds it.