site_archiver@lists.apple.com Delivered-To: darwin-dev@lists.apple.com Thread-index: AcjWEBDQ4hZGbro12kew6vhEhnh08w== Thread-topic: What's the official way to detect a user has administration privileges? User-agent: Microsoft-Entourage/12.10.0.080409 There is also the dsmemberutil on Leopard.

From: Nigel Kersten <nigel@explanatorygap.net> Date: Tue, 24 Jun 2008 08:20:25 -0700 To: Stéphane <ssudre@intego.com> Cc: <darwin-dev@lists.apple.com> Subject: Re: What's the official way to detect a user has administration privileges?

On Jun 24, 2008, at 3:32 AM, Stéphane wrote:

...

What's the official way to detect a user has administration privileges (from a Mac OS X point of view)?

OpenDirectory (how?) or does the fact that the user belongs to group admin is enough (with the exception of root)?

if you do just want to check whether a user is a member of the local admin group (though as others have pointed out, this may not be what you want)

$ dseditgroup -o checkmember -m adminuser -n . admin ; echo $? yes adminuser is a member of admin 0

$ dseditgroup -o checkmember -m notadmin -n . admin ; echo $? no notadmin is NOT a member of admin 2

-- Nigel Kersten http://explanatorygap.net

_______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-dev mailing list (Darwin-dev@lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-dev/nelson%40thursby.com

This email sent to nelson@thursby.com

_______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-dev mailing list (Darwin-dev@lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-dev/site_archiver%40lists.appl... This email sent to site_archiver@lists.apple.com