site_archiver@lists.apple.com Delivered-To: darwin-dev@lists.apple.com On Jun 24, 2008, at 21:49, Stephen J. Butler wrote: The best way to do what you want is to use the Authorization Services AuthorizationCopyRights: So unfortunately, this does not look like to be a solution. _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-dev mailing list (Darwin-dev@lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-dev/site_archiver%40lists.appl... On Tue, Jun 24, 2008 at 5:32 AM, Stéphane <ssudre@intego.com> wrote: What's the official way to detect a user has administration privileges (from a Mac OS X point of view)? OpenDirectory (how?) or does the fact that the user belongs to group admin is enough (with the exception of root)? <http://developer.apple.com/documentation/Security/Reference/ authorization_ref/Reference/reference.html#//apple_ref/doc/uid/ TP30000826-CH1g-F17549> Check for the "system.privilege.admin" right. Trying to get Extended Rights for "system.privilege.admin" fails for users with "Allow user to administer this computer" turned on. The error states that it fails because it requires interaction. This is probably to request the user to enter his admin password. This email sent to site_archiver@lists.apple.com