https://bugs.kde.org/show_bug.cgi?id=357245
--- Comment #7 from Pierre Ossman <oss...@cendio.se> --- (In reply to David Edmundson from comment #5) > Can you show us the default permissions on > org.freedesktop.packagekit.system-sources-refresh They are: <defaults> <allow_any>auth_admin</allow_any> <allow_inactive>auth_admin</allow_inactive> <allow_active>yes</allow_active> </defaults> (from https://github.com/hughsie/PackageKit/blob/master/policy/org.freedesktop.packagekit.policy.in) Remote sessions fall under the "any" category and it was changed from "no" to "auth_admin" here: https://github.com/hughsie/PackageKit/commit/4888afef339ec8472cf800b3e696f03631b1031e (In reply to Aleix Pol from comment #6) > I understand, you can always remove the plasmoid though. It doesn't serve > any purpose in a system without privileges to upgrade. I figured as much. But as a vendor I'm more concern about the defaults that everyone else will see, and what their experience will be. This is not a good out-of-box experience IMO. And to be honest, it's far from obvious how to fix this. Clicking on "Software updates" doesn't give any options to disable it. (Btw, is muon really the correct component here? I have no muon packages installed on this system.) -- You are receiving this mail because: You are watching all bug changes.