Calum Benson wrote: >>> "Current user" config: >>> Shared Folders (could affect all users if run as root, though) >> >> So should there be a GUI to help invoke it as root ? > > Good question. For this sort of app on Linux, we pop up a dialog that > allows you to either enter an an administrative password, or continue > with your current privileges. I'll have to check whether we're porting > this behaviour to Solaris. >
I believe "an administrative password" means one for the root account. I don't think we should port that to Solaris as is. There we have a continuum of setups between 'basic user' and 'root'. Maybe on Solaris we should only have a choice whether to run or pfexec such an app? Or simply another menu item that pfexec's it? It gets more complicated when you try to support roles (including, possibly, root). Because then you not only need 'an' administrative password, but also a way to specify the role to which it applies. Maybe we can at least enumerate all available roles instead of requiring manual input. So there is a choice: either have a simpler interface that requires profiles to be assigned directly to the user (which reduces security) or incorporate role support at the price of a UI which is even more complex than the "administrative password" one on Linux. FWIW: Most "run as" GUIs suck, IMHO. (At least those I've seen) -- Joerg -- Joerg Barfurth phone: +49 40 23646662 / x66662 Software Engineer mailto:joerg.barfurth at sun.com Desktop Technology http://reserv.ireland/twiki/bin/view/Argus/ Thin Client Software http://www.sun.com/software/sunray/ Sun Microsystems GmbH http://www.sun.com/software/javadesktopsystem/
