[Desktop-packages] [Bug 1008344] Re: checks "admin" group membership instead of querying polkit

2018-08-22 Thread Bug Watch Updater
** Changed in: policykit
   Status: Confirmed => Unknown

-- 
You received this bug notification because you are a member of Desktop
Packages, which is subscribed to language-selector in Ubuntu.
https://bugs.launchpad.net/bugs/1008344

Title:
  checks "admin" group membership instead of querying polkit

Status in PolicyKit:
  Unknown
Status in language-selector package in Ubuntu:
  Fix Released
Status in language-selector source package in Trusty:
  Fix Released

Bug description:
  trusty SRU request
  ==

  [Impact]
  The language-selector UI distinguishes between admin and standard users in 
such a way that certain buttons for doing things which require admin privileges 
are greyed out for standard users. This bug report describes an authorization 
setup where this design is inconvenient. It's reasonable to change the design 
and make the buttons sensitive for all users.

  [Test Case]
  If you log in into a standard user account and open gnome-language-selector, 
you'll see that certain buttons are greyed out. If you install the proposed 
package, those buttons will be sensitive, and you'll be able to change system 
wide settings provided that you enter an admin password. 

  [Regression Potential]
  When you start gnome-language-selector as a standard user, the UI takes a few 
seconds longer time than before to show up. This is intentional and needed for 
the install/remove feature to work.

  [Original description]
  In a new install of Ubuntu Precise, I cannot make any system-wide changes in 
the language selector (such as installing languages or clicking "Apply 
System-Wide"), only user-specific changes. All those controls for system-wide 
changes are greyed out, although my user does have sudo abilities and I would 
be able to enter the root password of the machine.

  The machine is freshly installed, but with customizations specific to
  our site, e.g. ldap authentication for users. Specifically, my user is
  an ldap user, not a local one, and there is a group in the ldap
  directory which was granted sudo capability by adding it to
  /etc/sudoers. My user is part of that group. sudo on the command line
  and gksudo work fine.

  ProblemType: Bug
  DistroRelease: Ubuntu 12.04
  Package: language-selector-gnome 0.79
  ProcVersionSignature: Ubuntu 3.2.0-24.39-generic 3.2.16
  Uname: Linux 3.2.0-24-generic x86_64
  ApportVersion: 2.0.1-0ubuntu8
  Architecture: amd64
  Date: Mon Jun  4 08:20:04 2012
  PackageArchitecture: all
  ProcEnviron:
   LANGUAGE=en_US:
   TERM=screen-256color
   PATH=(custom, no user)
   LANG=en_US.UTF-8
   SHELL=/bin/bash
  SourcePackage: language-selector
  UpgradeStatus: No upgrade log present (probably fresh install)

To manage notifications about this bug go to:
https://bugs.launchpad.net/policykit/+bug/1008344/+subscriptions

-- 
Mailing list: https://launchpad.net/~desktop-packages
Post to : desktop-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~desktop-packages
More help   : https://help.launchpad.net/ListHelp


[Desktop-packages] [Bug 1008344] Re: checks admin group membership instead of querying polkit

2014-07-08 Thread Launchpad Bug Tracker
This bug was fixed in the package language-selector - 0.129.1

---
language-selector (0.129.1) trusty-proposed; urgency=low

  * LanguageSelector/gtk/GtkLanguageSelector.py, help/C/index.docbook:
- Make the Apply System-Wide and Install / Remove Languages...
  buttons sensitive also for standard users (LP: #1008344).
 -- Gunnar Hjalmarsson gunna...@ubuntu.com   Fri, 27 Jun 2014 00:36:00 +0200

** Changed in: language-selector (Ubuntu Trusty)
   Status: Fix Committed = Fix Released

-- 
You received this bug notification because you are a member of Desktop
Packages, which is subscribed to language-selector in Ubuntu.
https://bugs.launchpad.net/bugs/1008344

Title:
  checks admin group membership instead of querying polkit

Status in PolicyKit:
  Confirmed
Status in “language-selector” package in Ubuntu:
  Fix Released
Status in “language-selector” source package in Trusty:
  Fix Released

Bug description:
  trusty SRU request
  ==

  [Impact]
  The language-selector UI distinguishes between admin and standard users in 
such a way that certain buttons for doing things which require admin privileges 
are greyed out for standard users. This bug report describes an authorization 
setup where this design is inconvenient. It's reasonable to change the design 
and make the buttons sensitive for all users.

  [Test Case]
  If you log in into a standard user account and open gnome-language-selector, 
you'll see that certain buttons are greyed out. If you install the proposed 
package, those buttons will be sensitive, and you'll be able to change system 
wide settings provided that you enter an admin password. 

  [Regression Potential]
  When you start gnome-language-selector as a standard user, the UI takes a few 
seconds longer time than before to show up. This is intentional and needed for 
the install/remove feature to work.

  [Original description]
  In a new install of Ubuntu Precise, I cannot make any system-wide changes in 
the language selector (such as installing languages or clicking Apply 
System-Wide), only user-specific changes. All those controls for system-wide 
changes are greyed out, although my user does have sudo abilities and I would 
be able to enter the root password of the machine.

  The machine is freshly installed, but with customizations specific to
  our site, e.g. ldap authentication for users. Specifically, my user is
  an ldap user, not a local one, and there is a group in the ldap
  directory which was granted sudo capability by adding it to
  /etc/sudoers. My user is part of that group. sudo on the command line
  and gksudo work fine.

  ProblemType: Bug
  DistroRelease: Ubuntu 12.04
  Package: language-selector-gnome 0.79
  ProcVersionSignature: Ubuntu 3.2.0-24.39-generic 3.2.16
  Uname: Linux 3.2.0-24-generic x86_64
  ApportVersion: 2.0.1-0ubuntu8
  Architecture: amd64
  Date: Mon Jun  4 08:20:04 2012
  PackageArchitecture: all
  ProcEnviron:
   LANGUAGE=en_US:
   TERM=screen-256color
   PATH=(custom, no user)
   LANG=en_US.UTF-8
   SHELL=/bin/bash
  SourcePackage: language-selector
  UpgradeStatus: No upgrade log present (probably fresh install)

To manage notifications about this bug go to:
https://bugs.launchpad.net/policykit/+bug/1008344/+subscriptions

-- 
Mailing list: https://launchpad.net/~desktop-packages
Post to : desktop-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~desktop-packages
More help   : https://help.launchpad.net/ListHelp


[Desktop-packages] [Bug 1008344] Re: checks admin group membership instead of querying polkit

2014-07-01 Thread Gunnar Hjalmarsson
I have installed language-selector-gnome 0.129.1 from trusty-proposed
and - unlike before - when logged in as a standard user, the buttons in
question are sensitive and I'm able to make system wide changes if
providing an admin password.

** Tags removed: verification-needed
** Tags added: verification-done

-- 
You received this bug notification because you are a member of Desktop
Packages, which is subscribed to language-selector in Ubuntu.
https://bugs.launchpad.net/bugs/1008344

Title:
  checks admin group membership instead of querying polkit

Status in PolicyKit:
  Confirmed
Status in “language-selector” package in Ubuntu:
  Fix Released
Status in “language-selector” source package in Trusty:
  Fix Committed

Bug description:
  trusty SRU request
  ==

  [Impact]
  The language-selector UI distinguishes between admin and standard users in 
such a way that certain buttons for doing things which require admin privileges 
are greyed out for standard users. This bug report describes an authorization 
setup where this design is inconvenient. It's reasonable to change the design 
and make the buttons sensitive for all users.

  [Test Case]
  If you log in into a standard user account and open gnome-language-selector, 
you'll see that certain buttons are greyed out. If you install the proposed 
package, those buttons will be sensitive, and you'll be able to change system 
wide settings provided that you enter an admin password. 

  [Regression Potential]
  When you start gnome-language-selector as a standard user, the UI takes a few 
seconds longer time than before to show up. This is intentional and needed for 
the install/remove feature to work.

  [Original description]
  In a new install of Ubuntu Precise, I cannot make any system-wide changes in 
the language selector (such as installing languages or clicking Apply 
System-Wide), only user-specific changes. All those controls for system-wide 
changes are greyed out, although my user does have sudo abilities and I would 
be able to enter the root password of the machine.

  The machine is freshly installed, but with customizations specific to
  our site, e.g. ldap authentication for users. Specifically, my user is
  an ldap user, not a local one, and there is a group in the ldap
  directory which was granted sudo capability by adding it to
  /etc/sudoers. My user is part of that group. sudo on the command line
  and gksudo work fine.

  ProblemType: Bug
  DistroRelease: Ubuntu 12.04
  Package: language-selector-gnome 0.79
  ProcVersionSignature: Ubuntu 3.2.0-24.39-generic 3.2.16
  Uname: Linux 3.2.0-24-generic x86_64
  ApportVersion: 2.0.1-0ubuntu8
  Architecture: amd64
  Date: Mon Jun  4 08:20:04 2012
  PackageArchitecture: all
  ProcEnviron:
   LANGUAGE=en_US:
   TERM=screen-256color
   PATH=(custom, no user)
   LANG=en_US.UTF-8
   SHELL=/bin/bash
  SourcePackage: language-selector
  UpgradeStatus: No upgrade log present (probably fresh install)

To manage notifications about this bug go to:
https://bugs.launchpad.net/policykit/+bug/1008344/+subscriptions

-- 
Mailing list: https://launchpad.net/~desktop-packages
Post to : desktop-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~desktop-packages
More help   : https://help.launchpad.net/ListHelp


[Desktop-packages] [Bug 1008344] Re: checks admin group membership instead of querying polkit

2014-07-01 Thread Chris J Arges
Hello Philipp, or anyone else affected,

Accepted language-selector into trusty-proposed. The package will build
now and be available at http://launchpad.net/ubuntu/+source/language-
selector/0.129.1 in a few hours, and then in the -proposed repository.

Please help us by testing this new package.  See
https://wiki.ubuntu.com/Testing/EnableProposed for documentation how to
enable and use -proposed.  Your feedback will aid us getting this update
out to other Ubuntu users.

If this package fixes the bug for you, please add a comment to this bug,
mentioning the version of the package you tested, and change the tag
from verification-needed to verification-done. If it does not fix the
bug for you, please add a comment stating that, and change the tag to
verification-failed.  In either case, details of your testing will help
us make a better decision.

Further information regarding the verification process can be found at
https://wiki.ubuntu.com/QATeam/PerformingSRUVerification .  Thank you in
advance!

** Changed in: language-selector (Ubuntu Trusty)
   Status: In Progress = Fix Committed

** Tags added: verification-needed

-- 
You received this bug notification because you are a member of Desktop
Packages, which is subscribed to language-selector in Ubuntu.
https://bugs.launchpad.net/bugs/1008344

Title:
  checks admin group membership instead of querying polkit

Status in PolicyKit:
  Confirmed
Status in “language-selector” package in Ubuntu:
  Fix Released
Status in “language-selector” source package in Trusty:
  Fix Committed

Bug description:
  trusty SRU request
  ==

  [Impact]
  The language-selector UI distinguishes between admin and standard users in 
such a way that certain buttons for doing things which require admin privileges 
are greyed out for standard users. This bug report describes an authorization 
setup where this design is inconvenient. It's reasonable to change the design 
and make the buttons sensitive for all users.

  [Test Case]
  If you log in into a standard user account and open gnome-language-selector, 
you'll see that certain buttons are greyed out. If you install the proposed 
package, those buttons will be sensitive, and you'll be able to change system 
wide settings provided that you enter an admin password. 

  [Regression Potential]
  When you start gnome-language-selector as a standard user, the UI takes a few 
seconds longer time than before to show up. This is intentional and needed for 
the install/remove feature to work.

  [Original description]
  In a new install of Ubuntu Precise, I cannot make any system-wide changes in 
the language selector (such as installing languages or clicking Apply 
System-Wide), only user-specific changes. All those controls for system-wide 
changes are greyed out, although my user does have sudo abilities and I would 
be able to enter the root password of the machine.

  The machine is freshly installed, but with customizations specific to
  our site, e.g. ldap authentication for users. Specifically, my user is
  an ldap user, not a local one, and there is a group in the ldap
  directory which was granted sudo capability by adding it to
  /etc/sudoers. My user is part of that group. sudo on the command line
  and gksudo work fine.

  ProblemType: Bug
  DistroRelease: Ubuntu 12.04
  Package: language-selector-gnome 0.79
  ProcVersionSignature: Ubuntu 3.2.0-24.39-generic 3.2.16
  Uname: Linux 3.2.0-24-generic x86_64
  ApportVersion: 2.0.1-0ubuntu8
  Architecture: amd64
  Date: Mon Jun  4 08:20:04 2012
  PackageArchitecture: all
  ProcEnviron:
   LANGUAGE=en_US:
   TERM=screen-256color
   PATH=(custom, no user)
   LANG=en_US.UTF-8
   SHELL=/bin/bash
  SourcePackage: language-selector
  UpgradeStatus: No upgrade log present (probably fresh install)

To manage notifications about this bug go to:
https://bugs.launchpad.net/policykit/+bug/1008344/+subscriptions

-- 
Mailing list: https://launchpad.net/~desktop-packages
Post to : desktop-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~desktop-packages
More help   : https://help.launchpad.net/ListHelp


[Desktop-packages] [Bug 1008344] Re: checks admin group membership instead of querying polkit

2014-06-26 Thread Gunnar Hjalmarsson
Hi Philipp!

Right, the language-selector UI will live longer than we thought, and
nothing has happened with Martin's freedesktop bug about PolicyKit. I
have made a change that I think is a reasonable way to deal with this
issue. You won't be prompted to install possible missing language
support packages unless you are a unix admin user, though.

** Description changed:

- In a new install of Ubuntu Precise, I cannot make any system-wide
- changes in the language selector (such as installing languages or
- clicking Apply System-Wide), only user-specific changes. All those
- controls for system-wide changes are greyed out, although my user does
- have sudo abilities and I would be able to enter the root password of
- the machine.
+ trusty SRU request
+ ==
+ 
+ [Impact]
+ The language-selector UI distinguishes between admin and standard users in 
such a way that certain buttons for doing things which require admin privileges 
are greyed out for standard users. This bug report describes an authorization 
setup where this design is inconvenient. It's reasonable to change the design 
and make the buttons sensitive for all users.
+ 
+ [Test Case]
+ If you log in into a standard user account and open gnome-language-selector, 
you'll see that certain buttons are greyed out. If you install the proposed 
package, those buttons will be sensitive, and you'll be able to change system 
wide settings provided that you enter an admin password. 
+ 
+ [Regression Potential]
+ When you start gnome-language-selector as a standard user, the UI takes a few 
seconds longer time than before to show up. This is intentional and needed for 
the install/remove feature to work.
+ 
+ [Original description]
+ In a new install of Ubuntu Precise, I cannot make any system-wide changes in 
the language selector (such as installing languages or clicking Apply 
System-Wide), only user-specific changes. All those controls for system-wide 
changes are greyed out, although my user does have sudo abilities and I would 
be able to enter the root password of the machine.
  
  The machine is freshly installed, but with customizations specific to
  our site, e.g. ldap authentication for users. Specifically, my user is
  an ldap user, not a local one, and there is a group in the ldap
  directory which was granted sudo capability by adding it to
  /etc/sudoers. My user is part of that group. sudo on the command line
  and gksudo work fine.
  
  ProblemType: Bug
  DistroRelease: Ubuntu 12.04
  Package: language-selector-gnome 0.79
  ProcVersionSignature: Ubuntu 3.2.0-24.39-generic 3.2.16
  Uname: Linux 3.2.0-24-generic x86_64
  ApportVersion: 2.0.1-0ubuntu8
  Architecture: amd64
  Date: Mon Jun  4 08:20:04 2012
  PackageArchitecture: all
  ProcEnviron:
-  LANGUAGE=en_US:
-  TERM=screen-256color
-  PATH=(custom, no user)
-  LANG=en_US.UTF-8
-  SHELL=/bin/bash
+  LANGUAGE=en_US:
+  TERM=screen-256color
+  PATH=(custom, no user)
+  LANG=en_US.UTF-8
+  SHELL=/bin/bash
  SourcePackage: language-selector
  UpgradeStatus: No upgrade log present (probably fresh install)

** Also affects: language-selector (Ubuntu Trusty)
   Importance: Undecided
   Status: New

** Changed in: language-selector (Ubuntu)
   Status: Triaged = In Progress

** Changed in: language-selector (Ubuntu)
 Assignee: (unassigned) = Gunnar Hjalmarsson (gunnarhj)

-- 
You received this bug notification because you are a member of Desktop
Packages, which is subscribed to language-selector in Ubuntu.
https://bugs.launchpad.net/bugs/1008344

Title:
  checks admin group membership instead of querying polkit

Status in PolicyKit:
  Confirmed
Status in “language-selector” package in Ubuntu:
  In Progress
Status in “language-selector” source package in Trusty:
  New

Bug description:
  trusty SRU request
  ==

  [Impact]
  The language-selector UI distinguishes between admin and standard users in 
such a way that certain buttons for doing things which require admin privileges 
are greyed out for standard users. This bug report describes an authorization 
setup where this design is inconvenient. It's reasonable to change the design 
and make the buttons sensitive for all users.

  [Test Case]
  If you log in into a standard user account and open gnome-language-selector, 
you'll see that certain buttons are greyed out. If you install the proposed 
package, those buttons will be sensitive, and you'll be able to change system 
wide settings provided that you enter an admin password. 

  [Regression Potential]
  When you start gnome-language-selector as a standard user, the UI takes a few 
seconds longer time than before to show up. This is intentional and needed for 
the install/remove feature to work.

  [Original description]
  In a new install of Ubuntu Precise, I cannot make any system-wide changes in 
the language selector (such as installing languages or clicking Apply 
System-Wide), only user-specific changes. All those controls for system-wide 

[Desktop-packages] [Bug 1008344] Re: checks admin group membership instead of querying polkit

2014-06-26 Thread Launchpad Bug Tracker
** Branch linked: lp:ubuntu/language-selector

-- 
You received this bug notification because you are a member of Desktop
Packages, which is subscribed to language-selector in Ubuntu.
https://bugs.launchpad.net/bugs/1008344

Title:
  checks admin group membership instead of querying polkit

Status in PolicyKit:
  Confirmed
Status in “language-selector” package in Ubuntu:
  In Progress
Status in “language-selector” source package in Trusty:
  New

Bug description:
  trusty SRU request
  ==

  [Impact]
  The language-selector UI distinguishes between admin and standard users in 
such a way that certain buttons for doing things which require admin privileges 
are greyed out for standard users. This bug report describes an authorization 
setup where this design is inconvenient. It's reasonable to change the design 
and make the buttons sensitive for all users.

  [Test Case]
  If you log in into a standard user account and open gnome-language-selector, 
you'll see that certain buttons are greyed out. If you install the proposed 
package, those buttons will be sensitive, and you'll be able to change system 
wide settings provided that you enter an admin password. 

  [Regression Potential]
  When you start gnome-language-selector as a standard user, the UI takes a few 
seconds longer time than before to show up. This is intentional and needed for 
the install/remove feature to work.

  [Original description]
  In a new install of Ubuntu Precise, I cannot make any system-wide changes in 
the language selector (such as installing languages or clicking Apply 
System-Wide), only user-specific changes. All those controls for system-wide 
changes are greyed out, although my user does have sudo abilities and I would 
be able to enter the root password of the machine.

  The machine is freshly installed, but with customizations specific to
  our site, e.g. ldap authentication for users. Specifically, my user is
  an ldap user, not a local one, and there is a group in the ldap
  directory which was granted sudo capability by adding it to
  /etc/sudoers. My user is part of that group. sudo on the command line
  and gksudo work fine.

  ProblemType: Bug
  DistroRelease: Ubuntu 12.04
  Package: language-selector-gnome 0.79
  ProcVersionSignature: Ubuntu 3.2.0-24.39-generic 3.2.16
  Uname: Linux 3.2.0-24-generic x86_64
  ApportVersion: 2.0.1-0ubuntu8
  Architecture: amd64
  Date: Mon Jun  4 08:20:04 2012
  PackageArchitecture: all
  ProcEnviron:
   LANGUAGE=en_US:
   TERM=screen-256color
   PATH=(custom, no user)
   LANG=en_US.UTF-8
   SHELL=/bin/bash
  SourcePackage: language-selector
  UpgradeStatus: No upgrade log present (probably fresh install)

To manage notifications about this bug go to:
https://bugs.launchpad.net/policykit/+bug/1008344/+subscriptions

-- 
Mailing list: https://launchpad.net/~desktop-packages
Post to : desktop-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~desktop-packages
More help   : https://help.launchpad.net/ListHelp


[Desktop-packages] [Bug 1008344] Re: checks admin group membership instead of querying polkit

2014-06-26 Thread Gunnar Hjalmarsson
** Changed in: language-selector (Ubuntu Trusty)
   Importance: Undecided = Medium

** Changed in: language-selector (Ubuntu Trusty)
   Status: New = In Progress

** Changed in: language-selector (Ubuntu Trusty)
 Assignee: (unassigned) = Gunnar Hjalmarsson (gunnarhj)

-- 
You received this bug notification because you are a member of Desktop
Packages, which is subscribed to language-selector in Ubuntu.
https://bugs.launchpad.net/bugs/1008344

Title:
  checks admin group membership instead of querying polkit

Status in PolicyKit:
  Confirmed
Status in “language-selector” package in Ubuntu:
  In Progress
Status in “language-selector” source package in Trusty:
  In Progress

Bug description:
  trusty SRU request
  ==

  [Impact]
  The language-selector UI distinguishes between admin and standard users in 
such a way that certain buttons for doing things which require admin privileges 
are greyed out for standard users. This bug report describes an authorization 
setup where this design is inconvenient. It's reasonable to change the design 
and make the buttons sensitive for all users.

  [Test Case]
  If you log in into a standard user account and open gnome-language-selector, 
you'll see that certain buttons are greyed out. If you install the proposed 
package, those buttons will be sensitive, and you'll be able to change system 
wide settings provided that you enter an admin password. 

  [Regression Potential]
  When you start gnome-language-selector as a standard user, the UI takes a few 
seconds longer time than before to show up. This is intentional and needed for 
the install/remove feature to work.

  [Original description]
  In a new install of Ubuntu Precise, I cannot make any system-wide changes in 
the language selector (such as installing languages or clicking Apply 
System-Wide), only user-specific changes. All those controls for system-wide 
changes are greyed out, although my user does have sudo abilities and I would 
be able to enter the root password of the machine.

  The machine is freshly installed, but with customizations specific to
  our site, e.g. ldap authentication for users. Specifically, my user is
  an ldap user, not a local one, and there is a group in the ldap
  directory which was granted sudo capability by adding it to
  /etc/sudoers. My user is part of that group. sudo on the command line
  and gksudo work fine.

  ProblemType: Bug
  DistroRelease: Ubuntu 12.04
  Package: language-selector-gnome 0.79
  ProcVersionSignature: Ubuntu 3.2.0-24.39-generic 3.2.16
  Uname: Linux 3.2.0-24-generic x86_64
  ApportVersion: 2.0.1-0ubuntu8
  Architecture: amd64
  Date: Mon Jun  4 08:20:04 2012
  PackageArchitecture: all
  ProcEnviron:
   LANGUAGE=en_US:
   TERM=screen-256color
   PATH=(custom, no user)
   LANG=en_US.UTF-8
   SHELL=/bin/bash
  SourcePackage: language-selector
  UpgradeStatus: No upgrade log present (probably fresh install)

To manage notifications about this bug go to:
https://bugs.launchpad.net/policykit/+bug/1008344/+subscriptions

-- 
Mailing list: https://launchpad.net/~desktop-packages
Post to : desktop-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~desktop-packages
More help   : https://help.launchpad.net/ListHelp


[Desktop-packages] [Bug 1008344] Re: checks admin group membership instead of querying polkit

2014-06-26 Thread Launchpad Bug Tracker
This bug was fixed in the package language-selector - 0.131

---
language-selector (0.131) utopic; urgency=low

  * LanguageSelector/gtk/GtkLanguageSelector.py, help/C/index.docbook:
- Make the Apply System-Wide and Install / Remove Languages...
  buttons sensitive also for standard users (LP: #1008344).
 -- Gunnar Hjalmarsson gunna...@ubuntu.com   Fri, 27 Jun 2014 00:06:00 +0200

** Changed in: language-selector (Ubuntu)
   Status: In Progress = Fix Released

-- 
You received this bug notification because you are a member of Desktop
Packages, which is subscribed to language-selector in Ubuntu.
https://bugs.launchpad.net/bugs/1008344

Title:
  checks admin group membership instead of querying polkit

Status in PolicyKit:
  Confirmed
Status in “language-selector” package in Ubuntu:
  Fix Released
Status in “language-selector” source package in Trusty:
  In Progress

Bug description:
  trusty SRU request
  ==

  [Impact]
  The language-selector UI distinguishes between admin and standard users in 
such a way that certain buttons for doing things which require admin privileges 
are greyed out for standard users. This bug report describes an authorization 
setup where this design is inconvenient. It's reasonable to change the design 
and make the buttons sensitive for all users.

  [Test Case]
  If you log in into a standard user account and open gnome-language-selector, 
you'll see that certain buttons are greyed out. If you install the proposed 
package, those buttons will be sensitive, and you'll be able to change system 
wide settings provided that you enter an admin password. 

  [Regression Potential]
  When you start gnome-language-selector as a standard user, the UI takes a few 
seconds longer time than before to show up. This is intentional and needed for 
the install/remove feature to work.

  [Original description]
  In a new install of Ubuntu Precise, I cannot make any system-wide changes in 
the language selector (such as installing languages or clicking Apply 
System-Wide), only user-specific changes. All those controls for system-wide 
changes are greyed out, although my user does have sudo abilities and I would 
be able to enter the root password of the machine.

  The machine is freshly installed, but with customizations specific to
  our site, e.g. ldap authentication for users. Specifically, my user is
  an ldap user, not a local one, and there is a group in the ldap
  directory which was granted sudo capability by adding it to
  /etc/sudoers. My user is part of that group. sudo on the command line
  and gksudo work fine.

  ProblemType: Bug
  DistroRelease: Ubuntu 12.04
  Package: language-selector-gnome 0.79
  ProcVersionSignature: Ubuntu 3.2.0-24.39-generic 3.2.16
  Uname: Linux 3.2.0-24-generic x86_64
  ApportVersion: 2.0.1-0ubuntu8
  Architecture: amd64
  Date: Mon Jun  4 08:20:04 2012
  PackageArchitecture: all
  ProcEnviron:
   LANGUAGE=en_US:
   TERM=screen-256color
   PATH=(custom, no user)
   LANG=en_US.UTF-8
   SHELL=/bin/bash
  SourcePackage: language-selector
  UpgradeStatus: No upgrade log present (probably fresh install)

To manage notifications about this bug go to:
https://bugs.launchpad.net/policykit/+bug/1008344/+subscriptions

-- 
Mailing list: https://launchpad.net/~desktop-packages
Post to : desktop-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~desktop-packages
More help   : https://help.launchpad.net/ListHelp


[Desktop-packages] [Bug 1008344] Re: checks admin group membership instead of querying polkit

2014-05-09 Thread Philipp Wendler
Now the S development cycle has passed, and I installed Ubuntu 14.04 and
there is still the same dialog, and it has still the same problem. Is
there now a chance that this gets revisited?

-- 
You received this bug notification because you are a member of Desktop
Packages, which is subscribed to language-selector in Ubuntu.
https://bugs.launchpad.net/bugs/1008344

Title:
  checks admin group membership instead of querying polkit

Status in PolicyKit:
  Confirmed
Status in “language-selector” package in Ubuntu:
  Triaged

Bug description:
  In a new install of Ubuntu Precise, I cannot make any system-wide
  changes in the language selector (such as installing languages or
  clicking Apply System-Wide), only user-specific changes. All those
  controls for system-wide changes are greyed out, although my user does
  have sudo abilities and I would be able to enter the root password of
  the machine.

  The machine is freshly installed, but with customizations specific to
  our site, e.g. ldap authentication for users. Specifically, my user is
  an ldap user, not a local one, and there is a group in the ldap
  directory which was granted sudo capability by adding it to
  /etc/sudoers. My user is part of that group. sudo on the command line
  and gksudo work fine.

  ProblemType: Bug
  DistroRelease: Ubuntu 12.04
  Package: language-selector-gnome 0.79
  ProcVersionSignature: Ubuntu 3.2.0-24.39-generic 3.2.16
  Uname: Linux 3.2.0-24-generic x86_64
  ApportVersion: 2.0.1-0ubuntu8
  Architecture: amd64
  Date: Mon Jun  4 08:20:04 2012
  PackageArchitecture: all
  ProcEnviron:
   LANGUAGE=en_US:
   TERM=screen-256color
   PATH=(custom, no user)
   LANG=en_US.UTF-8
   SHELL=/bin/bash
  SourcePackage: language-selector
  UpgradeStatus: No upgrade log present (probably fresh install)

To manage notifications about this bug go to:
https://bugs.launchpad.net/policykit/+bug/1008344/+subscriptions

-- 
Mailing list: https://launchpad.net/~desktop-packages
Post to : desktop-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~desktop-packages
More help   : https://help.launchpad.net/ListHelp


[Desktop-packages] [Bug 1008344] Re: checks admin group membership instead of querying polkit

2013-02-04 Thread Gunnar Hjalmarsson
Philipp,
Maybe the solution you propose is easy to implement if you know how to do it. I 
for one don't. Please feel free to provide code.

The language-selector UI is planned to be replaced in the standard
Ubuntu distribution by the corresponding UI in gnome-control-center. It
will probably happen during the S development cycle. For that reason it
would be hard to find an experienced developer who would want to spend a
significant amount of time with redesigning language-selector.

-- 
You received this bug notification because you are a member of Desktop
Packages, which is subscribed to language-selector in Ubuntu.
https://bugs.launchpad.net/bugs/1008344

Title:
  checks admin group membership instead of querying polkit

Status in PolicyKit:
  Confirmed
Status in “language-selector” package in Ubuntu:
  Triaged

Bug description:
  In a new install of Ubuntu Precise, I cannot make any system-wide
  changes in the language selector (such as installing languages or
  clicking Apply System-Wide), only user-specific changes. All those
  controls for system-wide changes are greyed out, although my user does
  have sudo abilities and I would be able to enter the root password of
  the machine.

  The machine is freshly installed, but with customizations specific to
  our site, e.g. ldap authentication for users. Specifically, my user is
  an ldap user, not a local one, and there is a group in the ldap
  directory which was granted sudo capability by adding it to
  /etc/sudoers. My user is part of that group. sudo on the command line
  and gksudo work fine.

  ProblemType: Bug
  DistroRelease: Ubuntu 12.04
  Package: language-selector-gnome 0.79
  ProcVersionSignature: Ubuntu 3.2.0-24.39-generic 3.2.16
  Uname: Linux 3.2.0-24-generic x86_64
  ApportVersion: 2.0.1-0ubuntu8
  Architecture: amd64
  Date: Mon Jun  4 08:20:04 2012
  PackageArchitecture: all
  ProcEnviron:
   LANGUAGE=en_US:
   TERM=screen-256color
   PATH=(custom, no user)
   LANG=en_US.UTF-8
   SHELL=/bin/bash
  SourcePackage: language-selector
  UpgradeStatus: No upgrade log present (probably fresh install)

To manage notifications about this bug go to:
https://bugs.launchpad.net/policykit/+bug/1008344/+subscriptions

-- 
Mailing list: https://launchpad.net/~desktop-packages
Post to : desktop-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~desktop-packages
More help   : https://help.launchpad.net/ListHelp


[Desktop-packages] [Bug 1008344] Re: checks admin group membership instead of querying polkit

2013-01-31 Thread Gunnar Hjalmarsson
I'm disinclined to propose that the is_admin check is dropped, since it
would degenerate the UI for a lot of (non-admin) users. I think that the
check for missing langpacks would make that route especially bad, and
personally I'd prefer to leave the bug open for the time being.

Martin, what's your estimate of how long it will take before the polkit
people deal with your bug?

-- 
You received this bug notification because you are a member of Desktop
Packages, which is subscribed to language-selector in Ubuntu.
https://bugs.launchpad.net/bugs/1008344

Title:
  checks admin group membership instead of querying polkit

Status in PolicyKit:
  Confirmed
Status in “language-selector” package in Ubuntu:
  Triaged

Bug description:
  In a new install of Ubuntu Precise, I cannot make any system-wide
  changes in the language selector (such as installing languages or
  clicking Apply System-Wide), only user-specific changes. All those
  controls for system-wide changes are greyed out, although my user does
  have sudo abilities and I would be able to enter the root password of
  the machine.

  The machine is freshly installed, but with customizations specific to
  our site, e.g. ldap authentication for users. Specifically, my user is
  an ldap user, not a local one, and there is a group in the ldap
  directory which was granted sudo capability by adding it to
  /etc/sudoers. My user is part of that group. sudo on the command line
  and gksudo work fine.

  ProblemType: Bug
  DistroRelease: Ubuntu 12.04
  Package: language-selector-gnome 0.79
  ProcVersionSignature: Ubuntu 3.2.0-24.39-generic 3.2.16
  Uname: Linux 3.2.0-24-generic x86_64
  ApportVersion: 2.0.1-0ubuntu8
  Architecture: amd64
  Date: Mon Jun  4 08:20:04 2012
  PackageArchitecture: all
  ProcEnviron:
   LANGUAGE=en_US:
   TERM=screen-256color
   PATH=(custom, no user)
   LANG=en_US.UTF-8
   SHELL=/bin/bash
  SourcePackage: language-selector
  UpgradeStatus: No upgrade log present (probably fresh install)

To manage notifications about this bug go to:
https://bugs.launchpad.net/policykit/+bug/1008344/+subscriptions

-- 
Mailing list: https://launchpad.net/~desktop-packages
Post to : desktop-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~desktop-packages
More help   : https://help.launchpad.net/ListHelp


Re: [Desktop-packages] [Bug 1008344] Re: checks admin group membership instead of querying polkit

2013-01-31 Thread Martin Pitt
Gunnar Hjalmarsson [2013-02-01  0:49 -]:
 Martin, what's your estimate of how long it will take before the polkit
 people deal with your bug?

Really hard to say, it depends on the available time and mood of the
polkit authors. Could be anything from a few days to many weeks; we
should at least get the design settled with upstream, the
implementation is probably rather easy.

Martin
-- 
Martin Pitt| http://www.piware.de
Ubuntu Developer (www.ubuntu.com)  | Debian Developer  (www.debian.org)

-- 
You received this bug notification because you are a member of Desktop
Packages, which is subscribed to language-selector in Ubuntu.
https://bugs.launchpad.net/bugs/1008344

Title:
  checks admin group membership instead of querying polkit

Status in PolicyKit:
  Confirmed
Status in “language-selector” package in Ubuntu:
  Triaged

Bug description:
  In a new install of Ubuntu Precise, I cannot make any system-wide
  changes in the language selector (such as installing languages or
  clicking Apply System-Wide), only user-specific changes. All those
  controls for system-wide changes are greyed out, although my user does
  have sudo abilities and I would be able to enter the root password of
  the machine.

  The machine is freshly installed, but with customizations specific to
  our site, e.g. ldap authentication for users. Specifically, my user is
  an ldap user, not a local one, and there is a group in the ldap
  directory which was granted sudo capability by adding it to
  /etc/sudoers. My user is part of that group. sudo on the command line
  and gksudo work fine.

  ProblemType: Bug
  DistroRelease: Ubuntu 12.04
  Package: language-selector-gnome 0.79
  ProcVersionSignature: Ubuntu 3.2.0-24.39-generic 3.2.16
  Uname: Linux 3.2.0-24-generic x86_64
  ApportVersion: 2.0.1-0ubuntu8
  Architecture: amd64
  Date: Mon Jun  4 08:20:04 2012
  PackageArchitecture: all
  ProcEnviron:
   LANGUAGE=en_US:
   TERM=screen-256color
   PATH=(custom, no user)
   LANG=en_US.UTF-8
   SHELL=/bin/bash
  SourcePackage: language-selector
  UpgradeStatus: No upgrade log present (probably fresh install)

To manage notifications about this bug go to:
https://bugs.launchpad.net/policykit/+bug/1008344/+subscriptions

-- 
Mailing list: https://launchpad.net/~desktop-packages
Post to : desktop-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~desktop-packages
More help   : https://help.launchpad.net/ListHelp


[Desktop-packages] [Bug 1008344] Re: checks admin group membership instead of querying polkit

2013-01-31 Thread Philipp Wendler
Please, drop the is_admin check completely.

I said it already: you cannot know whether the user knows the password
of an admin account if you do not ask for it. If you try guessing, you
will inevitable guess wrong sometimes and frustrate the user. This is
also true if polkit does the guessing.

If you do not want to confuse user with admin buttons, then, either put
a lock symbol on all of them, of grey them out and add a single unlock
button just like the time settings dialog.

For the check for missing packages, you can just add a button check for
missing packages, or run the check when the user clicks the unlock
button. Or you convert the popup that asks the user into a text and
button in the language dialog, something along Missing packages detect.
[lock icon Install them].

This solution is easy to implement, does not require new polkit
features, has a clear, obvious, ui, and does not get in the way of users
by hiding things from them they would like to see.

-- 
You received this bug notification because you are a member of Desktop
Packages, which is subscribed to language-selector in Ubuntu.
https://bugs.launchpad.net/bugs/1008344

Title:
  checks admin group membership instead of querying polkit

Status in PolicyKit:
  Confirmed
Status in “language-selector” package in Ubuntu:
  Triaged

Bug description:
  In a new install of Ubuntu Precise, I cannot make any system-wide
  changes in the language selector (such as installing languages or
  clicking Apply System-Wide), only user-specific changes. All those
  controls for system-wide changes are greyed out, although my user does
  have sudo abilities and I would be able to enter the root password of
  the machine.

  The machine is freshly installed, but with customizations specific to
  our site, e.g. ldap authentication for users. Specifically, my user is
  an ldap user, not a local one, and there is a group in the ldap
  directory which was granted sudo capability by adding it to
  /etc/sudoers. My user is part of that group. sudo on the command line
  and gksudo work fine.

  ProblemType: Bug
  DistroRelease: Ubuntu 12.04
  Package: language-selector-gnome 0.79
  ProcVersionSignature: Ubuntu 3.2.0-24.39-generic 3.2.16
  Uname: Linux 3.2.0-24-generic x86_64
  ApportVersion: 2.0.1-0ubuntu8
  Architecture: amd64
  Date: Mon Jun  4 08:20:04 2012
  PackageArchitecture: all
  ProcEnviron:
   LANGUAGE=en_US:
   TERM=screen-256color
   PATH=(custom, no user)
   LANG=en_US.UTF-8
   SHELL=/bin/bash
  SourcePackage: language-selector
  UpgradeStatus: No upgrade log present (probably fresh install)

To manage notifications about this bug go to:
https://bugs.launchpad.net/policykit/+bug/1008344/+subscriptions

-- 
Mailing list: https://launchpad.net/~desktop-packages
Post to : desktop-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~desktop-packages
More help   : https://help.launchpad.net/ListHelp


[Desktop-packages] [Bug 1008344] Re: checks admin group membership instead of querying polkit

2013-01-30 Thread Gunnar Hjalmarsson
Thanks, Martin. Unfortunately I can't reproduce your Not authorized.
case:

$ pkcheck --action-id com.ubuntu.languageselector.setsystemdefaultlanguage 
--process $$
polkit\56retains_authorization_after_challenge=1
Authorization requires authentication and -u wasn't passed.
$ groups
test-std
$ cat /etc/polkit-1/localauthority.conf.d/51-ubuntu-admin.conf
[Configuration]
AdminIdentities=unix-group:sudo;unix-group:admin

What kind of 'magic' is it you use? ;-)

-- 
You received this bug notification because you are a member of Desktop
Packages, which is subscribed to language-selector in Ubuntu.
https://bugs.launchpad.net/bugs/1008344

Title:
  checks admin group membership instead of querying polkit

Status in “language-selector” package in Ubuntu:
  Triaged

Bug description:
  In a new install of Ubuntu Precise, I cannot make any system-wide
  changes in the language selector (such as installing languages or
  clicking Apply System-Wide), only user-specific changes. All those
  controls for system-wide changes are greyed out, although my user does
  have sudo abilities and I would be able to enter the root password of
  the machine.

  The machine is freshly installed, but with customizations specific to
  our site, e.g. ldap authentication for users. Specifically, my user is
  an ldap user, not a local one, and there is a group in the ldap
  directory which was granted sudo capability by adding it to
  /etc/sudoers. My user is part of that group. sudo on the command line
  and gksudo work fine.

  ProblemType: Bug
  DistroRelease: Ubuntu 12.04
  Package: language-selector-gnome 0.79
  ProcVersionSignature: Ubuntu 3.2.0-24.39-generic 3.2.16
  Uname: Linux 3.2.0-24-generic x86_64
  ApportVersion: 2.0.1-0ubuntu8
  Architecture: amd64
  Date: Mon Jun  4 08:20:04 2012
  PackageArchitecture: all
  ProcEnviron:
   LANGUAGE=en_US:
   TERM=screen-256color
   PATH=(custom, no user)
   LANG=en_US.UTF-8
   SHELL=/bin/bash
  SourcePackage: language-selector
  UpgradeStatus: No upgrade log present (probably fresh install)

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/language-selector/+bug/1008344/+subscriptions

-- 
Mailing list: https://launchpad.net/~desktop-packages
Post to : desktop-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~desktop-packages
More help   : https://help.launchpad.net/ListHelp


[Desktop-packages] [Bug 1008344] Re: checks admin group membership instead of querying polkit

2013-01-30 Thread Martin Pitt
I previously just tried this under su, but I fell into the trap that
this looks at allow_inactive, not allow_active. Sorry about that.

I filed an upstream polkit bug to get access to this information, as
this is IMHO the only clean way of fixing this. Until then, I suggest to
either leave that bug open or always show the Apply system-wide
buttons as that will at least make the functionality available (but it
may not work for non-admins).

** Bug watch added: freedesktop.org Bugzilla #60103
   https://bugs.freedesktop.org/show_bug.cgi?id=60103

** Also affects: policykit via
   https://bugs.freedesktop.org/show_bug.cgi?id=60103
   Importance: Unknown
   Status: Unknown

-- 
You received this bug notification because you are a member of Desktop
Packages, which is subscribed to language-selector in Ubuntu.
https://bugs.launchpad.net/bugs/1008344

Title:
  checks admin group membership instead of querying polkit

Status in PolicyKit:
  Unknown
Status in “language-selector” package in Ubuntu:
  Triaged

Bug description:
  In a new install of Ubuntu Precise, I cannot make any system-wide
  changes in the language selector (such as installing languages or
  clicking Apply System-Wide), only user-specific changes. All those
  controls for system-wide changes are greyed out, although my user does
  have sudo abilities and I would be able to enter the root password of
  the machine.

  The machine is freshly installed, but with customizations specific to
  our site, e.g. ldap authentication for users. Specifically, my user is
  an ldap user, not a local one, and there is a group in the ldap
  directory which was granted sudo capability by adding it to
  /etc/sudoers. My user is part of that group. sudo on the command line
  and gksudo work fine.

  ProblemType: Bug
  DistroRelease: Ubuntu 12.04
  Package: language-selector-gnome 0.79
  ProcVersionSignature: Ubuntu 3.2.0-24.39-generic 3.2.16
  Uname: Linux 3.2.0-24-generic x86_64
  ApportVersion: 2.0.1-0ubuntu8
  Architecture: amd64
  Date: Mon Jun  4 08:20:04 2012
  PackageArchitecture: all
  ProcEnviron:
   LANGUAGE=en_US:
   TERM=screen-256color
   PATH=(custom, no user)
   LANG=en_US.UTF-8
   SHELL=/bin/bash
  SourcePackage: language-selector
  UpgradeStatus: No upgrade log present (probably fresh install)

To manage notifications about this bug go to:
https://bugs.launchpad.net/policykit/+bug/1008344/+subscriptions

-- 
Mailing list: https://launchpad.net/~desktop-packages
Post to : desktop-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~desktop-packages
More help   : https://help.launchpad.net/ListHelp


[Desktop-packages] [Bug 1008344] Re: checks admin group membership instead of querying polkit

2013-01-30 Thread Bug Watch Updater
Launchpad has imported 1 comments from the remote bug at
https://bugs.freedesktop.org/show_bug.cgi?id=60103.

If you reply to an imported comment from within Launchpad, your comment
will be sent to the remote bug automatically. Read more about
Launchpad's inter-bugtracker facilities at
https://help.launchpad.net/InterBugTracking.


On 2013-01-31T06:53:34+00:00 Martin Pitt wrote:

We have an application which shows an Apply system-wide button
depending whether or not the user is an administrator. Right now we
define this in terms of being in the admin Unix group, and define the
default polkit rules so that admin group members are admins.

We would like to move this check from group membership to directly
asking polkit, as this is more robust when e. g. customizing the polkit
configuration for remote authorizations.

The problem is, the current API for checking if a process can get
authorized for a particular action (i. e.
polkit_authority_check_authorization()) has no way of distinguishing if
it's the current user who can authenticate, or whether any admin of the
system can. I. e. if the policy is auth_admin, then this call, or
pkcheck will always say Authorization requires authentication and -u
wasn't passed..

It would be nice if there was either a detail (like
polkit_user_denied=1) in the returned PolkitDetails which would point
that out, or there was a flag like
POLKIT_CHECK_AUTHORIZATION_FLAGS_CALLING_USER_ONLY which would say no
if the calling user is not able to authenticate with her credentials.

The agent obviously has access to that information, as it will ask for
the user's password if the user itself is an admin, or present a list of
admins if not. But I don't see this exposed anywhere towards the client.

Reply at: https://bugs.launchpad.net/ubuntu/+source/language-
selector/+bug/1008344/comments/28


** Changed in: policykit
   Status: Unknown = Confirmed

** Changed in: policykit
   Importance: Unknown = Medium

-- 
You received this bug notification because you are a member of Desktop
Packages, which is subscribed to language-selector in Ubuntu.
https://bugs.launchpad.net/bugs/1008344

Title:
  checks admin group membership instead of querying polkit

Status in PolicyKit:
  Confirmed
Status in “language-selector” package in Ubuntu:
  Triaged

Bug description:
  In a new install of Ubuntu Precise, I cannot make any system-wide
  changes in the language selector (such as installing languages or
  clicking Apply System-Wide), only user-specific changes. All those
  controls for system-wide changes are greyed out, although my user does
  have sudo abilities and I would be able to enter the root password of
  the machine.

  The machine is freshly installed, but with customizations specific to
  our site, e.g. ldap authentication for users. Specifically, my user is
  an ldap user, not a local one, and there is a group in the ldap
  directory which was granted sudo capability by adding it to
  /etc/sudoers. My user is part of that group. sudo on the command line
  and gksudo work fine.

  ProblemType: Bug
  DistroRelease: Ubuntu 12.04
  Package: language-selector-gnome 0.79
  ProcVersionSignature: Ubuntu 3.2.0-24.39-generic 3.2.16
  Uname: Linux 3.2.0-24-generic x86_64
  ApportVersion: 2.0.1-0ubuntu8
  Architecture: amd64
  Date: Mon Jun  4 08:20:04 2012
  PackageArchitecture: all
  ProcEnviron:
   LANGUAGE=en_US:
   TERM=screen-256color
   PATH=(custom, no user)
   LANG=en_US.UTF-8
   SHELL=/bin/bash
  SourcePackage: language-selector
  UpgradeStatus: No upgrade log present (probably fresh install)

To manage notifications about this bug go to:
https://bugs.launchpad.net/policykit/+bug/1008344/+subscriptions

-- 
Mailing list: https://launchpad.net/~desktop-packages
Post to : desktop-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~desktop-packages
More help   : https://help.launchpad.net/ListHelp


[Desktop-packages] [Bug 1008344] Re: checks admin group membership instead of querying polkit

2013-01-29 Thread Martin Pitt
 The problem is that polkit responds with no, but you can
authenticate (or something like it) also for standard users.

Hm, I get a different error message depending whether or not the user is
an admin:

for my user (which is an admin):
$ pkcheck --action-id com.ubuntu.languageselector.setsystemdefaultlanguage 
--process $$ 
polkit\56retains_authorization_after_challenge=1
Authorization requires authentication and -u wasn't passed.

For a test user which isn't admin:
$ pkcheck --action-id com.ubuntu.languageselector.setsystemdefaultlanguage 
--process $$ 
Not authorized.

(This implies not using interactivity). So it seems to me that polkit
can figure this out correctly?

That doesn't prevent us from allowing to authenticate as a different
user when using interactive mode of course, but it should be possible
to figure out whether the current user is an admin.

 * Ask polkit

That's still my favourite solution.

 * Drop the is_admin check

Would be confusing UI wise, but still bearable if it isn't going to work
any other way.

 * gsettings

Please no. This is just wrong in so many ways.

Thanks!

-- 
You received this bug notification because you are a member of Desktop
Packages, which is subscribed to language-selector in Ubuntu.
https://bugs.launchpad.net/bugs/1008344

Title:
  checks admin group membership instead of querying polkit

Status in “language-selector” package in Ubuntu:
  Triaged

Bug description:
  In a new install of Ubuntu Precise, I cannot make any system-wide
  changes in the language selector (such as installing languages or
  clicking Apply System-Wide), only user-specific changes. All those
  controls for system-wide changes are greyed out, although my user does
  have sudo abilities and I would be able to enter the root password of
  the machine.

  The machine is freshly installed, but with customizations specific to
  our site, e.g. ldap authentication for users. Specifically, my user is
  an ldap user, not a local one, and there is a group in the ldap
  directory which was granted sudo capability by adding it to
  /etc/sudoers. My user is part of that group. sudo on the command line
  and gksudo work fine.

  ProblemType: Bug
  DistroRelease: Ubuntu 12.04
  Package: language-selector-gnome 0.79
  ProcVersionSignature: Ubuntu 3.2.0-24.39-generic 3.2.16
  Uname: Linux 3.2.0-24-generic x86_64
  ApportVersion: 2.0.1-0ubuntu8
  Architecture: amd64
  Date: Mon Jun  4 08:20:04 2012
  PackageArchitecture: all
  ProcEnviron:
   LANGUAGE=en_US:
   TERM=screen-256color
   PATH=(custom, no user)
   LANG=en_US.UTF-8
   SHELL=/bin/bash
  SourcePackage: language-selector
  UpgradeStatus: No upgrade log present (probably fresh install)

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/language-selector/+bug/1008344/+subscriptions

-- 
Mailing list: https://launchpad.net/~desktop-packages
Post to : desktop-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~desktop-packages
More help   : https://help.launchpad.net/ListHelp


[Desktop-packages] [Bug 1008344] Re: checks admin group membership instead of querying polkit

2013-01-27 Thread Gunnar Hjalmarsson
Trying to summarize the suggestions so far:

* Ask polkit
I failed to make polkit provide the info we would need. If somebody knows how 
to do that, it would probably be the best and easiest solution. The code in the 
linked branch may or may not be useful as a starting point.

* Drop the is_admin check
As is argued for in comment #16, #23 and #24, we could drop the is_admin check. 
But there is at least one thing that would need to be addressed first in that 
case:
Besides determining whether some buttons should be greyed out, the is_admin 
check also controls if language-selector shall look for missing langpacks. If a 
missing langpack is found, the user is asked if s/he wants to install it. 
Neither the missing langpack test nor the question would make sense if you 
don't have permission to install langpacks.
Possibly it's time to reconsider this check each time gnome-language-selector 
is launched? Considering the planned switch from the language-selector UI to 
the region capplet in gnome-control-center, this needs to be looked into soon 
anyway.

* gsettings
As a workaround, if none of the above two options is doable right now, I 
mentioned in comment #18 the possibility to use gsettings to force the buttons 
to not be greyed out.

So, how do we proceed?

-- 
You received this bug notification because you are a member of Desktop
Packages, which is subscribed to language-selector in Ubuntu.
https://bugs.launchpad.net/bugs/1008344

Title:
  checks admin group membership instead of querying polkit

Status in “language-selector” package in Ubuntu:
  Triaged

Bug description:
  In a new install of Ubuntu Precise, I cannot make any system-wide
  changes in the language selector (such as installing languages or
  clicking Apply System-Wide), only user-specific changes. All those
  controls for system-wide changes are greyed out, although my user does
  have sudo abilities and I would be able to enter the root password of
  the machine.

  The machine is freshly installed, but with customizations specific to
  our site, e.g. ldap authentication for users. Specifically, my user is
  an ldap user, not a local one, and there is a group in the ldap
  directory which was granted sudo capability by adding it to
  /etc/sudoers. My user is part of that group. sudo on the command line
  and gksudo work fine.

  ProblemType: Bug
  DistroRelease: Ubuntu 12.04
  Package: language-selector-gnome 0.79
  ProcVersionSignature: Ubuntu 3.2.0-24.39-generic 3.2.16
  Uname: Linux 3.2.0-24-generic x86_64
  ApportVersion: 2.0.1-0ubuntu8
  Architecture: amd64
  Date: Mon Jun  4 08:20:04 2012
  PackageArchitecture: all
  ProcEnviron:
   LANGUAGE=en_US:
   TERM=screen-256color
   PATH=(custom, no user)
   LANG=en_US.UTF-8
   SHELL=/bin/bash
  SourcePackage: language-selector
  UpgradeStatus: No upgrade log present (probably fresh install)

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/language-selector/+bug/1008344/+subscriptions

-- 
Mailing list: https://launchpad.net/~desktop-packages
Post to : desktop-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~desktop-packages
More help   : https://help.launchpad.net/ListHelp


[Desktop-packages] [Bug 1008344] Re: checks admin group membership instead of querying polkit

2013-01-02 Thread Philipp Wendler
I would get rid of greying out these buttons completely.

You will never know whether the user is able to authenticate as admin,
because you cannot know whether the user knows the password of an admin
account if you do not ask for it. In all cases where the buttons are
greyed out, but the user would know how to authenticate, this will
create frustration.

Furthermore, there is no advantage of having the buttons greyed out. If
you want to signal to the user that they require more rights, you can
put a lock symbol on them (isn't there an example in the time settings
dialogue for this?).

This solution would be the easiest to implement and to use.

-- 
You received this bug notification because you are a member of Desktop
Packages, which is subscribed to language-selector in Ubuntu.
https://bugs.launchpad.net/bugs/1008344

Title:
  checks admin group membership instead of querying polkit

Status in “language-selector” package in Ubuntu:
  Triaged

Bug description:
  In a new install of Ubuntu Precise, I cannot make any system-wide
  changes in the language selector (such as installing languages or
  clicking Apply System-Wide), only user-specific changes. All those
  controls for system-wide changes are greyed out, although my user does
  have sudo abilities and I would be able to enter the root password of
  the machine.

  The machine is freshly installed, but with customizations specific to
  our site, e.g. ldap authentication for users. Specifically, my user is
  an ldap user, not a local one, and there is a group in the ldap
  directory which was granted sudo capability by adding it to
  /etc/sudoers. My user is part of that group. sudo on the command line
  and gksudo work fine.

  ProblemType: Bug
  DistroRelease: Ubuntu 12.04
  Package: language-selector-gnome 0.79
  ProcVersionSignature: Ubuntu 3.2.0-24.39-generic 3.2.16
  Uname: Linux 3.2.0-24-generic x86_64
  ApportVersion: 2.0.1-0ubuntu8
  Architecture: amd64
  Date: Mon Jun  4 08:20:04 2012
  PackageArchitecture: all
  ProcEnviron:
   LANGUAGE=en_US:
   TERM=screen-256color
   PATH=(custom, no user)
   LANG=en_US.UTF-8
   SHELL=/bin/bash
  SourcePackage: language-selector
  UpgradeStatus: No upgrade log present (probably fresh install)

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/language-selector/+bug/1008344/+subscriptions

-- 
Mailing list: https://launchpad.net/~desktop-packages
Post to : desktop-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~desktop-packages
More help   : https://help.launchpad.net/ListHelp


[Desktop-packages] [Bug 1008344] Re: checks admin group membership instead of querying polkit

2013-01-02 Thread Nikki VonHollen
philw85: I completely agree. The time settings dialog is a great example
for how this should work.

I think it's also fine to just let PolicyKit prompt when it needs to
without telling the user beforehand. Average Ubuntu users are going to
be admins on their single-user systems, and where users are not admins
on their own machines it will still be clear what the problem is.

Dialogs that connect to services that use PolicyKit don't need to be
aware PolicyKit exists, and keeping those dialogs unaware of PolicyKit
makes them flexible for more exotic configurations. There are so many
in-the-middle configurations where the user is almost an admin, but
can't do absolutely everything. Maybe the user is configured to be able
to change time/language settings and install trusted packages, but isn't
allowed to install untrusted packages. My point is that the question is
the user an admin? is very ambiguous, so it's better to just not ask
and let PolicyKit handle it.

-- 
You received this bug notification because you are a member of Desktop
Packages, which is subscribed to language-selector in Ubuntu.
https://bugs.launchpad.net/bugs/1008344

Title:
  checks admin group membership instead of querying polkit

Status in “language-selector” package in Ubuntu:
  Triaged

Bug description:
  In a new install of Ubuntu Precise, I cannot make any system-wide
  changes in the language selector (such as installing languages or
  clicking Apply System-Wide), only user-specific changes. All those
  controls for system-wide changes are greyed out, although my user does
  have sudo abilities and I would be able to enter the root password of
  the machine.

  The machine is freshly installed, but with customizations specific to
  our site, e.g. ldap authentication for users. Specifically, my user is
  an ldap user, not a local one, and there is a group in the ldap
  directory which was granted sudo capability by adding it to
  /etc/sudoers. My user is part of that group. sudo on the command line
  and gksudo work fine.

  ProblemType: Bug
  DistroRelease: Ubuntu 12.04
  Package: language-selector-gnome 0.79
  ProcVersionSignature: Ubuntu 3.2.0-24.39-generic 3.2.16
  Uname: Linux 3.2.0-24-generic x86_64
  ApportVersion: 2.0.1-0ubuntu8
  Architecture: amd64
  Date: Mon Jun  4 08:20:04 2012
  PackageArchitecture: all
  ProcEnviron:
   LANGUAGE=en_US:
   TERM=screen-256color
   PATH=(custom, no user)
   LANG=en_US.UTF-8
   SHELL=/bin/bash
  SourcePackage: language-selector
  UpgradeStatus: No upgrade log present (probably fresh install)

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/language-selector/+bug/1008344/+subscriptions

-- 
Mailing list: https://launchpad.net/~desktop-packages
Post to : desktop-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~desktop-packages
More help   : https://help.launchpad.net/ListHelp


[Desktop-packages] [Bug 1008344] Re: checks admin group membership instead of querying polkit

2013-01-01 Thread Gunnar Hjalmarsson
On 2012-12-31 20:54, Steve Langasek wrote:
 On Mon, Dec 31, 2012 at 06:16:40PM -, Gunnar Hjalmarsson wrote:
 Seems like it says no, but you can authenticate by providing the
 credentials for an admin user. And that's not what we want to
 know, is it?
 
 Yes, it is.  That's how polkit works

Let's not forget the context, please. language-selector contains some
buttons for accomplishing tasks that only admin users are allowed to do.
Those buttons are greyed out for non-admin users.

It seems to me that polkit is not designed to provide the info necessary
to distinguish beforehand between admin and non-admin users. I suppose
you agree that the answer no, but you can authenticate by providing the
credentials for an admin user isn't useful for that purpose. If you
don't, I may be missing something.

-- 
You received this bug notification because you are a member of Desktop
Packages, which is subscribed to language-selector in Ubuntu.
https://bugs.launchpad.net/bugs/1008344

Title:
  checks admin group membership instead of querying polkit

Status in “language-selector” package in Ubuntu:
  Triaged

Bug description:
  In a new install of Ubuntu Precise, I cannot make any system-wide
  changes in the language selector (such as installing languages or
  clicking Apply System-Wide), only user-specific changes. All those
  controls for system-wide changes are greyed out, although my user does
  have sudo abilities and I would be able to enter the root password of
  the machine.

  The machine is freshly installed, but with customizations specific to
  our site, e.g. ldap authentication for users. Specifically, my user is
  an ldap user, not a local one, and there is a group in the ldap
  directory which was granted sudo capability by adding it to
  /etc/sudoers. My user is part of that group. sudo on the command line
  and gksudo work fine.

  ProblemType: Bug
  DistroRelease: Ubuntu 12.04
  Package: language-selector-gnome 0.79
  ProcVersionSignature: Ubuntu 3.2.0-24.39-generic 3.2.16
  Uname: Linux 3.2.0-24-generic x86_64
  ApportVersion: 2.0.1-0ubuntu8
  Architecture: amd64
  Date: Mon Jun  4 08:20:04 2012
  PackageArchitecture: all
  ProcEnviron:
   LANGUAGE=en_US:
   TERM=screen-256color
   PATH=(custom, no user)
   LANG=en_US.UTF-8
   SHELL=/bin/bash
  SourcePackage: language-selector
  UpgradeStatus: No upgrade log present (probably fresh install)

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/language-selector/+bug/1008344/+subscriptions

-- 
Mailing list: https://launchpad.net/~desktop-packages
Post to : desktop-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~desktop-packages
More help   : https://help.launchpad.net/ListHelp


[Desktop-packages] [Bug 1008344] Re: checks admin group membership instead of querying polkit

2012-12-31 Thread Gunnar Hjalmarsson
If we can't make polkit provide the desired information without real
authentication attempts, and since this is a GUI issue and not a
security issue, maybe a gsettings key could be a sufficient solution to
this bug.

try:
gsettings_value = subprocess.check_output(
  ['gsettings', 'get', 'com.ubuntu.language-selector',
   'no-greyed-out-admin-buttons']).decode().rstrip()
except subprocess.CalledProcessError:
gsettings_value = 'false'
if gsettings_value == 'true':
self.is_admin = True
else:
# find out if user has admin privileges via unix groups
try:
in_grp_admin = grp.getgrnam(admin)[2] in os.getgroups()
except KeyError:
in_grp_admin = False
try:
in_grp_sudo = grp.getgrnam(sudo)[2] in os.getgroups()
except KeyError:
in_grp_sudo = False
self.is_admin = (os.getuid() == 0 or in_grp_sudo or in_grp_admin)

Then, when giving a user admin privileges without using the sudo or
admin unix group, changing the value of the gsettings key for that
user would prevent the buttons in question from being greyed out.

-- 
You received this bug notification because you are a member of Desktop
Packages, which is subscribed to language-selector in Ubuntu.
https://bugs.launchpad.net/bugs/1008344

Title:
  checks admin group membership instead of querying polkit

Status in “language-selector” package in Ubuntu:
  Triaged

Bug description:
  In a new install of Ubuntu Precise, I cannot make any system-wide
  changes in the language selector (such as installing languages or
  clicking Apply System-Wide), only user-specific changes. All those
  controls for system-wide changes are greyed out, although my user does
  have sudo abilities and I would be able to enter the root password of
  the machine.

  The machine is freshly installed, but with customizations specific to
  our site, e.g. ldap authentication for users. Specifically, my user is
  an ldap user, not a local one, and there is a group in the ldap
  directory which was granted sudo capability by adding it to
  /etc/sudoers. My user is part of that group. sudo on the command line
  and gksudo work fine.

  ProblemType: Bug
  DistroRelease: Ubuntu 12.04
  Package: language-selector-gnome 0.79
  ProcVersionSignature: Ubuntu 3.2.0-24.39-generic 3.2.16
  Uname: Linux 3.2.0-24-generic x86_64
  ApportVersion: 2.0.1-0ubuntu8
  Architecture: amd64
  Date: Mon Jun  4 08:20:04 2012
  PackageArchitecture: all
  ProcEnviron:
   LANGUAGE=en_US:
   TERM=screen-256color
   PATH=(custom, no user)
   LANG=en_US.UTF-8
   SHELL=/bin/bash
  SourcePackage: language-selector
  UpgradeStatus: No upgrade log present (probably fresh install)

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/language-selector/+bug/1008344/+subscriptions

-- 
Mailing list: https://launchpad.net/~desktop-packages
Post to : desktop-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~desktop-packages
More help   : https://help.launchpad.net/ListHelp


Re: [Desktop-packages] [Bug 1008344] Re: checks admin group membership instead of querying polkit

2012-12-31 Thread Martin Pitt
Gunnar Hjalmarsson [2012-12-31 14:27 -]:
 If we can't make polkit provide the desired information without real
 authentication attempts

This is possible. The polkit API has a flag to enable/disable
interactivity, depending on which you either get a no, but you can
authenticate, or a yes answer.

You can see this on the command line with

  pkcheck --action-id
com.ubuntu.languageselector.setsystemdefaultlanguage --process $$

if you additionally specify --allow-user-interaction, you'll get the
password dialog instead.

 Then, when giving a user admin privileges without using the sudo or
 admin unix group, changing the value of the gsettings key for that
 user would prevent the buttons in question from being greyed out.

Please let's not do that. Being an admin or not is not a configuration
matter, polkit already knows that.

Martin
-- 
Martin Pitt| http://www.piware.de
Ubuntu Developer (www.ubuntu.com)  | Debian Developer  (www.debian.org)

-- 
You received this bug notification because you are a member of Desktop
Packages, which is subscribed to language-selector in Ubuntu.
https://bugs.launchpad.net/bugs/1008344

Title:
  checks admin group membership instead of querying polkit

Status in “language-selector” package in Ubuntu:
  Triaged

Bug description:
  In a new install of Ubuntu Precise, I cannot make any system-wide
  changes in the language selector (such as installing languages or
  clicking Apply System-Wide), only user-specific changes. All those
  controls for system-wide changes are greyed out, although my user does
  have sudo abilities and I would be able to enter the root password of
  the machine.

  The machine is freshly installed, but with customizations specific to
  our site, e.g. ldap authentication for users. Specifically, my user is
  an ldap user, not a local one, and there is a group in the ldap
  directory which was granted sudo capability by adding it to
  /etc/sudoers. My user is part of that group. sudo on the command line
  and gksudo work fine.

  ProblemType: Bug
  DistroRelease: Ubuntu 12.04
  Package: language-selector-gnome 0.79
  ProcVersionSignature: Ubuntu 3.2.0-24.39-generic 3.2.16
  Uname: Linux 3.2.0-24-generic x86_64
  ApportVersion: 2.0.1-0ubuntu8
  Architecture: amd64
  Date: Mon Jun  4 08:20:04 2012
  PackageArchitecture: all
  ProcEnviron:
   LANGUAGE=en_US:
   TERM=screen-256color
   PATH=(custom, no user)
   LANG=en_US.UTF-8
   SHELL=/bin/bash
  SourcePackage: language-selector
  UpgradeStatus: No upgrade log present (probably fresh install)

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/language-selector/+bug/1008344/+subscriptions

-- 
Mailing list: https://launchpad.net/~desktop-packages
Post to : desktop-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~desktop-packages
More help   : https://help.launchpad.net/ListHelp


[Desktop-packages] [Bug 1008344] Re: checks admin group membership instead of querying polkit

2012-12-31 Thread Gunnar Hjalmarsson
On 2012-12-31 15:51, Martin Pitt wrote:
 Gunnar Hjalmarsson [2012-12-31 14:27 -]:
 If we can't make polkit provide the desired information without real
 authentication attempts
 
 This is possible. The polkit API has a flag to enable/disable
 interactivity, depending on which you either get a no, but you can
 authenticate, or a yes answer.

Not enabling interactivity is no longer the problem. If you read comment
#17 and check out the latest code in the linked branch, you'll see what
I mean.

The problem is that polkit responds with no, but you can authenticate
(or something like it) also for standard users. Seems like it says no,
but you can authenticate by providing the credentials for an admin
user. And that's not what we want to know, is it?

-- 
You received this bug notification because you are a member of Desktop
Packages, which is subscribed to language-selector in Ubuntu.
https://bugs.launchpad.net/bugs/1008344

Title:
  checks admin group membership instead of querying polkit

Status in “language-selector” package in Ubuntu:
  Triaged

Bug description:
  In a new install of Ubuntu Precise, I cannot make any system-wide
  changes in the language selector (such as installing languages or
  clicking Apply System-Wide), only user-specific changes. All those
  controls for system-wide changes are greyed out, although my user does
  have sudo abilities and I would be able to enter the root password of
  the machine.

  The machine is freshly installed, but with customizations specific to
  our site, e.g. ldap authentication for users. Specifically, my user is
  an ldap user, not a local one, and there is a group in the ldap
  directory which was granted sudo capability by adding it to
  /etc/sudoers. My user is part of that group. sudo on the command line
  and gksudo work fine.

  ProblemType: Bug
  DistroRelease: Ubuntu 12.04
  Package: language-selector-gnome 0.79
  ProcVersionSignature: Ubuntu 3.2.0-24.39-generic 3.2.16
  Uname: Linux 3.2.0-24-generic x86_64
  ApportVersion: 2.0.1-0ubuntu8
  Architecture: amd64
  Date: Mon Jun  4 08:20:04 2012
  PackageArchitecture: all
  ProcEnviron:
   LANGUAGE=en_US:
   TERM=screen-256color
   PATH=(custom, no user)
   LANG=en_US.UTF-8
   SHELL=/bin/bash
  SourcePackage: language-selector
  UpgradeStatus: No upgrade log present (probably fresh install)

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/language-selector/+bug/1008344/+subscriptions

-- 
Mailing list: https://launchpad.net/~desktop-packages
Post to : desktop-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~desktop-packages
More help   : https://help.launchpad.net/ListHelp


Re: [Desktop-packages] [Bug 1008344] Re: checks admin group membership instead of querying polkit

2012-12-31 Thread Steve Langasek
On Mon, Dec 31, 2012 at 06:16:40PM -, Gunnar Hjalmarsson wrote:
 The problem is that polkit responds with no, but you can authenticate
 (or something like it) also for standard users. Seems like it says no,
 but you can authenticate by providing the credentials for an admin
 user. And that's not what we want to know, is it?

Yes, it is.  That's how polkit works - if the user isn't already authorized,
they are given the option to authenticate as an admin user who does have
permission to make the changes.

-- 
You received this bug notification because you are a member of Desktop
Packages, which is subscribed to language-selector in Ubuntu.
https://bugs.launchpad.net/bugs/1008344

Title:
  checks admin group membership instead of querying polkit

Status in “language-selector” package in Ubuntu:
  Triaged

Bug description:
  In a new install of Ubuntu Precise, I cannot make any system-wide
  changes in the language selector (such as installing languages or
  clicking Apply System-Wide), only user-specific changes. All those
  controls for system-wide changes are greyed out, although my user does
  have sudo abilities and I would be able to enter the root password of
  the machine.

  The machine is freshly installed, but with customizations specific to
  our site, e.g. ldap authentication for users. Specifically, my user is
  an ldap user, not a local one, and there is a group in the ldap
  directory which was granted sudo capability by adding it to
  /etc/sudoers. My user is part of that group. sudo on the command line
  and gksudo work fine.

  ProblemType: Bug
  DistroRelease: Ubuntu 12.04
  Package: language-selector-gnome 0.79
  ProcVersionSignature: Ubuntu 3.2.0-24.39-generic 3.2.16
  Uname: Linux 3.2.0-24-generic x86_64
  ApportVersion: 2.0.1-0ubuntu8
  Architecture: amd64
  Date: Mon Jun  4 08:20:04 2012
  PackageArchitecture: all
  ProcEnviron:
   LANGUAGE=en_US:
   TERM=screen-256color
   PATH=(custom, no user)
   LANG=en_US.UTF-8
   SHELL=/bin/bash
  SourcePackage: language-selector
  UpgradeStatus: No upgrade log present (probably fresh install)

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/language-selector/+bug/1008344/+subscriptions

-- 
Mailing list: https://launchpad.net/~desktop-packages
Post to : desktop-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~desktop-packages
More help   : https://help.launchpad.net/ListHelp


[Desktop-packages] [Bug 1008344] Re: checks admin group membership instead of querying polkit

2012-12-29 Thread Gunnar Hjalmarsson
Thanks for the hints, Martin. I gave up on ls-dbus-backend, discovered
gir1.2-polkit-1.0 and wrote a new function in utils.py. Now the code
runs, but there is a tiny problem: AdminPrivileges() always returns
True. :(

On 2012-12-23 10:56, Martin Pitt wrote:
 But with polkit we can probably just drop the whole is_admin check
 completely. If a non-admin user is starting l-s, the polkit dialog will
 still allow you to authenticate as another user who is an admin.

Simple indeed, bug would it really be a solution? Even if the polkit
dialog allows you to enter the credentials of an admin user, as long as
you are a standard user you typically don't know any admin password, do
you? Personally I think that the current UI, where the admin only
controls are disabled (greyed out) for standard users, is better than
letting the user know only by an authentication failure.

Question is if there is a way to make polkit tell whether you can
authenticate as the current _user_. Unfortunately the get_is_challenge()
method seems to take into account the possibility to enter an admin
password...

-- 
You received this bug notification because you are a member of Desktop
Packages, which is subscribed to language-selector in Ubuntu.
https://bugs.launchpad.net/bugs/1008344

Title:
  checks admin group membership instead of querying polkit

Status in “language-selector” package in Ubuntu:
  Triaged

Bug description:
  In a new install of Ubuntu Precise, I cannot make any system-wide
  changes in the language selector (such as installing languages or
  clicking Apply System-Wide), only user-specific changes. All those
  controls for system-wide changes are greyed out, although my user does
  have sudo abilities and I would be able to enter the root password of
  the machine.

  The machine is freshly installed, but with customizations specific to
  our site, e.g. ldap authentication for users. Specifically, my user is
  an ldap user, not a local one, and there is a group in the ldap
  directory which was granted sudo capability by adding it to
  /etc/sudoers. My user is part of that group. sudo on the command line
  and gksudo work fine.

  ProblemType: Bug
  DistroRelease: Ubuntu 12.04
  Package: language-selector-gnome 0.79
  ProcVersionSignature: Ubuntu 3.2.0-24.39-generic 3.2.16
  Uname: Linux 3.2.0-24-generic x86_64
  ApportVersion: 2.0.1-0ubuntu8
  Architecture: amd64
  Date: Mon Jun  4 08:20:04 2012
  PackageArchitecture: all
  ProcEnviron:
   LANGUAGE=en_US:
   TERM=screen-256color
   PATH=(custom, no user)
   LANG=en_US.UTF-8
   SHELL=/bin/bash
  SourcePackage: language-selector
  UpgradeStatus: No upgrade log present (probably fresh install)

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/language-selector/+bug/1008344/+subscriptions

-- 
Mailing list: https://launchpad.net/~desktop-packages
Post to : desktop-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~desktop-packages
More help   : https://help.launchpad.net/ListHelp


[Desktop-packages] [Bug 1008344] Re: checks admin group membership instead of querying polkit

2012-12-23 Thread Martin Pitt
I'm not sure why this doesn't work, as other parts of the code do the
same. However, this is not what you want anyway: This check would
already authenticate, i. e. you would get a password prompt right at the
startup of l-s just for checking if you are an administrator. Instead,
this should query polkit in no interactivity mode (no
POLKIT_CHECK_AUTHORIZATION_FLAGS_ALLOW_USER_INTERACTION), and check if
it gets a no but you can authorize result (sorry, can't research the
details here).

But with polkit we can probably just drop the whole is_admin check
completely. If a non-admin user is starting l-s, the polkit dialog will
still allow you to authenticate as another user who is an admin.

-- 
You received this bug notification because you are a member of Desktop
Packages, which is subscribed to language-selector in Ubuntu.
https://bugs.launchpad.net/bugs/1008344

Title:
  checks admin group membership instead of querying polkit

Status in “language-selector” package in Ubuntu:
  Triaged

Bug description:
  In a new install of Ubuntu Precise, I cannot make any system-wide
  changes in the language selector (such as installing languages or
  clicking Apply System-Wide), only user-specific changes. All those
  controls for system-wide changes are greyed out, although my user does
  have sudo abilities and I would be able to enter the root password of
  the machine.

  The machine is freshly installed, but with customizations specific to
  our site, e.g. ldap authentication for users. Specifically, my user is
  an ldap user, not a local one, and there is a group in the ldap
  directory which was granted sudo capability by adding it to
  /etc/sudoers. My user is part of that group. sudo on the command line
  and gksudo work fine.

  ProblemType: Bug
  DistroRelease: Ubuntu 12.04
  Package: language-selector-gnome 0.79
  ProcVersionSignature: Ubuntu 3.2.0-24.39-generic 3.2.16
  Uname: Linux 3.2.0-24-generic x86_64
  ApportVersion: 2.0.1-0ubuntu8
  Architecture: amd64
  Date: Mon Jun  4 08:20:04 2012
  PackageArchitecture: all
  ProcEnviron:
   LANGUAGE=en_US:
   TERM=screen-256color
   PATH=(custom, no user)
   LANG=en_US.UTF-8
   SHELL=/bin/bash
  SourcePackage: language-selector
  UpgradeStatus: No upgrade log present (probably fresh install)

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/language-selector/+bug/1008344/+subscriptions

-- 
Mailing list: https://launchpad.net/~desktop-packages
Post to : desktop-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~desktop-packages
More help   : https://help.launchpad.net/ListHelp


[Desktop-packages] [Bug 1008344] Re: checks admin group membership instead of querying polkit

2012-12-21 Thread Gunnar Hjalmarsson
** Branch linked: lp:~desktop-bugs/ubuntu/raring/language-selector/auth

-- 
You received this bug notification because you are a member of Desktop
Packages, which is subscribed to language-selector in Ubuntu.
https://bugs.launchpad.net/bugs/1008344

Title:
  checks admin group membership instead of querying polkit

Status in “language-selector” package in Ubuntu:
  Triaged

Bug description:
  In a new install of Ubuntu Precise, I cannot make any system-wide
  changes in the language selector (such as installing languages or
  clicking Apply System-Wide), only user-specific changes. All those
  controls for system-wide changes are greyed out, although my user does
  have sudo abilities and I would be able to enter the root password of
  the machine.

  The machine is freshly installed, but with customizations specific to
  our site, e.g. ldap authentication for users. Specifically, my user is
  an ldap user, not a local one, and there is a group in the ldap
  directory which was granted sudo capability by adding it to
  /etc/sudoers. My user is part of that group. sudo on the command line
  and gksudo work fine.

  ProblemType: Bug
  DistroRelease: Ubuntu 12.04
  Package: language-selector-gnome 0.79
  ProcVersionSignature: Ubuntu 3.2.0-24.39-generic 3.2.16
  Uname: Linux 3.2.0-24-generic x86_64
  ApportVersion: 2.0.1-0ubuntu8
  Architecture: amd64
  Date: Mon Jun  4 08:20:04 2012
  PackageArchitecture: all
  ProcEnviron:
   LANGUAGE=en_US:
   TERM=screen-256color
   PATH=(custom, no user)
   LANG=en_US.UTF-8
   SHELL=/bin/bash
  SourcePackage: language-selector
  UpgradeStatus: No upgrade log present (probably fresh install)

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/language-selector/+bug/1008344/+subscriptions

-- 
Mailing list: https://launchpad.net/~desktop-packages
Post to : desktop-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~desktop-packages
More help   : https://help.launchpad.net/ListHelp


[Desktop-packages] [Bug 1008344] Re: checks admin group membership instead of querying polkit

2012-12-21 Thread Gunnar Hjalmarsson
I linked an experimental branch to this bug, where I show a first
attempt to change language-selector in this respect. It doesn't work,
though.

This line (144):
obj = bus.get_object('com.ubuntu.LanguageSelector','/')

results in the error:
Could not get owner of name 'com.ubuntu.LanguageSelector'

If you are versed in Python and Policykit, you probably see in the
branch what I tried to do. Any hints about how to move forward would be
appreciated.

-- 
You received this bug notification because you are a member of Desktop
Packages, which is subscribed to language-selector in Ubuntu.
https://bugs.launchpad.net/bugs/1008344

Title:
  checks admin group membership instead of querying polkit

Status in “language-selector” package in Ubuntu:
  Triaged

Bug description:
  In a new install of Ubuntu Precise, I cannot make any system-wide
  changes in the language selector (such as installing languages or
  clicking Apply System-Wide), only user-specific changes. All those
  controls for system-wide changes are greyed out, although my user does
  have sudo abilities and I would be able to enter the root password of
  the machine.

  The machine is freshly installed, but with customizations specific to
  our site, e.g. ldap authentication for users. Specifically, my user is
  an ldap user, not a local one, and there is a group in the ldap
  directory which was granted sudo capability by adding it to
  /etc/sudoers. My user is part of that group. sudo on the command line
  and gksudo work fine.

  ProblemType: Bug
  DistroRelease: Ubuntu 12.04
  Package: language-selector-gnome 0.79
  ProcVersionSignature: Ubuntu 3.2.0-24.39-generic 3.2.16
  Uname: Linux 3.2.0-24-generic x86_64
  ApportVersion: 2.0.1-0ubuntu8
  Architecture: amd64
  Date: Mon Jun  4 08:20:04 2012
  PackageArchitecture: all
  ProcEnviron:
   LANGUAGE=en_US:
   TERM=screen-256color
   PATH=(custom, no user)
   LANG=en_US.UTF-8
   SHELL=/bin/bash
  SourcePackage: language-selector
  UpgradeStatus: No upgrade log present (probably fresh install)

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/language-selector/+bug/1008344/+subscriptions

-- 
Mailing list: https://launchpad.net/~desktop-packages
Post to : desktop-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~desktop-packages
More help   : https://help.launchpad.net/ListHelp