I don't see what the issue is here. Sally wants to change system configuration, the system asks her for the administrative user's password. If she doesn't have the password, she cannot change the configuration.
This is no different than sally logging out and logging back in with the Norman user, or simply typing "su - norman" in a shell. Sally can list the contents of the "admin" group if she wants to know who is in it. Telling her that Norman is an admin is no secret. There is no security impact here. Do you feel this is a usability issue? -- privilege escalation https://bugs.launchpad.net/bugs/681685 You received this bug notification because you are a member of Ubuntu Bugs, which is a direct subscriber. -- ubuntu-bugs mailing list [email protected] https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
