diff options
author | Miloslav Trmač <mitr@redhat.com> | 2013-02-14 14:48:20 +0100 |
---|---|---|
committer | Miloslav Trmač <mitr@redhat.com> | 2013-05-06 19:50:18 +0200 |
commit | 31b138d17f259f2d06a86dbbd31202ef43dbfa41 (patch) | |
tree | 6f53612641f1feb019b975ccb73eee6ab15ba95d /docs | |
parent | 44bea5072f804c03546d35c4f855f9641c29110d (diff) |
Use auth_admin* instead of auth_self* in examples
From time to time, application developers just copy example
configuration without examining it in details. Because polkit is
typically used to control access to system-level operations, the policy
(and therefore the examples) should limit access to system
administrators only.
Diffstat (limited to 'docs')
-rw-r--r-- | docs/man/polkit.xml | 2 | ||||
-rw-r--r-- | docs/polkit/overview.xml | 4 |
2 files changed, 3 insertions, 3 deletions
diff --git a/docs/man/polkit.xml b/docs/man/polkit.xml index aaac4f4..f8b4849 100644 --- a/docs/man/polkit.xml +++ b/docs/man/polkit.xml @@ -913,7 +913,7 @@ polkit.addRule(function(action, subject) { polkit.addRule(function(action, subject) { if (action.id == "org.freedesktop.policykit.exec" && action.lookup("program") == "/usr/bin/cat") { - return polkit.Result.AUTH_SELF; + return polkit.Result.AUTH_ADMIN; } }); ]]></programlisting> diff --git a/docs/polkit/overview.xml b/docs/polkit/overview.xml index 8d22570..fb14e50 100644 --- a/docs/polkit/overview.xml +++ b/docs/polkit/overview.xml @@ -261,8 +261,8 @@ that can be used together with <ulink url="http://developer.gnome.org/gtk3/unstable/GtkLockButton.html"><type>GtkLockButton</type></ulink>. Note that for <type>GtkLockButton</type> to work well, the - polkit action backing it should use <literal>auth_self_keep</literal> or - <literal>auth_admin_keep</literal> for its implicit authorizations. + polkit action backing it should use <literal>auth_admin_keep</literal> or + <literal>auth_self_keep</literal> for its implicit authorizations. This is often used to implement an <ulink url="http://developer.gnome.org/hig-book/3.2/hig-book.html#windows-instant-apply">instant apply</ulink> paradigm whereby the user |