#1027735 systemsettings: wrong password expected

Package:
systemsettings
Source:
systemsettings
Description:
System Settings interface
Submitter:
renaud
Date:
2023-01-02 15:51:04 UTC
Severity:
normal
#1027735#5
Date:
2023-01-02 15:48:20 UTC
From:
To:
Dear Maintainer,

context :
- up to date debian (kde) with exixting root password
- plasma : 5.26.4
- kde frameworks : 5.101.0
- Qt : 5.15.7

to reproduce
- have 2 users, not tested with more users
- only one of them has status "admin"
- to be logged on the "not admin" user
- use discover for update or install or uninstall

observed :
Discover expects the user password while logged on "not admin" user

expected :
Discover expects the root password because I'm not logged on admin user

additional :
- when the 2 users have status "not admin", the root password is expected
- a "not admin" user is able to change the other user from "not admin" to
admin, then any user is able to change the system, I think.