Re: What's the official way to detect a user has administration privileges?
Re: What's the official way to detect a user has administration privileges?
- Subject: Re: What's the official way to detect a user has administration privileges?
- From: Stephane Sudre <email@hidden>
- Date: Wed, 25 Jun 2008 17:31:14 +0200
On Jun 24, 2008, at 21:49, Stephen J. Butler wrote:
On Tue, Jun 24, 2008 at 5:32 AM, Stéphane <email@hidden> wrote:
What's the official way to detect a user has administration
privileges (from
a Mac OS X point of view)?
OpenDirectory (how?) or does the fact that the user belongs to group
admin
is enough (with the exception of root)?
The best way to do what you want is to use the Authorization Services
AuthorizationCopyRights:
<http://developer.apple.com/documentation/Security/Reference/
authorization_ref/Reference/reference.html#//apple_ref/doc/uid/
TP30000826-CH1g-F17549>
Check for the "system.privilege.admin" right.
Trying to get Extended Rights for "system.privilege.admin" fails for
users with "Allow user to administer this computer" turned on. The
error states that it fails because it requires interaction. This is
probably to request the user to enter his admin password.
So unfortunately, this does not look like to be a solution.
_______________________________________________
Do not post admin requests to the list. They will be ignored.
Darwin-dev mailing list (email@hidden)
Help/Unsubscribe/Update your Subscription:
This email sent to email@hidden