> The problem is that polkit responds with "no, but you can
authenticate" (or something like it) also for standard users.

Hm, I get a different error message depending whether or not the user is
an admin:

for my user (which is an admin):
$ pkcheck --action-id com.ubuntu.languageselector.setsystemdefaultlanguage 
--process $$ 
polkit\56retains_authorization_after_challenge=1
Authorization requires authentication and -u wasn't passed.

For a test user which isn't admin:
$ pkcheck --action-id com.ubuntu.languageselector.setsystemdefaultlanguage 
--process $$ 
Not authorized.

(This implies not using interactivity). So it seems to me that polkit
can figure this out correctly?

That doesn't prevent us from allowing to authenticate as a different
user when using "interactive" mode of course, but it should be possible
to figure out whether the current user is an "admin".

> * Ask polkit

That's still my favourite solution.

> * Drop the is_admin check

Would be confusing UI wise, but still bearable if it isn't going to work
any other way.

> * gsettings

Please no. This is just wrong in so many ways.

Thanks!

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1008344

Title:
  checks "admin" group membership instead of querying polkit

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/language-selector/+bug/1008344/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to