On Wed, 2017-04-05 at 14:14 -0700, Adam Williamson wrote:
On Sun, 2017-04-02 at 09:44 -0500, Michael Catanzaro wrote:
Also: being able to install without authentication but not delete matches our behavior for system packages. I think it's silly to allow users to install stuff but not to remove it, but that's our status quo.
I thought the intent was that you should need admin privileges to do either. The only thing regular users are supposed to be allowed to do without admin privileges is *update* the system, though since that now requires a system reboot, I'm not sure even that should be allowed without auth any more.
To be clear, this is only my recollection, I haven't gone back and checked yet. I may be misremembering the discussions...