site_archiver@lists.apple.com Delivered-To: darwin-dev@lists.apple.com On Jun 24, 2008, at 12:42, Jean-Daniel Dupas wrote: On Jun 24, 2008, at 16:59, Graham.Lee@sophos.com wrote: Identity services has a serious flaw for me: it's Leopard only. Maybe I should rephrase the question: _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-dev mailing list (Darwin-dev@lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-dev/site_archiver%40lists.appl... There is no administration privileges from a Mac OS X point of view. Each privileged task has its own rules defined in /etc/authorization In the case I'm thinking about: Mac OS X point of view == "Allow user to administer this computer" in System Preferences > Accounts > Security. Which is the way (I hope) most users see it. Identity services might help: http://developer.apple.com/documentation/Networking/Conceptual/ IdentityServices_ProgGuide/Introduction/chapter_1_section_1.html How do you check if "Allow user to administer this computer" is turned on for a specific user account? This email sent to site_archiver@lists.apple.com