Add more helpers for handling profile/service support
[connman] / plugins / polkit.c
index d3ca692..16dd9d5 100644 (file)
 #include <connman/dbus.h>
 #include <connman/log.h>
 
-#define ACTION "org.moblin.connman.modify"
+#define ACTION_MODIFY "org.moblin.connman.modify"
+#define ACTION_SECRET "org.moblin.connman.secret"
 
 static DBusConnection *connection;
 static PolKitContext *polkit_context;
 
-static int polkit_authorize(const char *sender)
+static int polkit_authorize(const char *sender,
+                               enum connman_security_privilege privilege)
 {
        DBusError error;
        PolKitCaller *caller;
        PolKitAction *action;
        PolKitResult result;
+       const char *id = NULL;
 
        DBG("sender %s", sender);
 
+       switch (privilege) {
+       case CONNMAN_SECURITY_PRIVILEGE_PUBLIC:
+               return 0;
+       case CONNMAN_SECURITY_PRIVILEGE_MODIFY:
+               id = ACTION_MODIFY;
+               break;
+       case CONNMAN_SECURITY_PRIVILEGE_SECRET:
+               id = ACTION_SECRET;
+               break;
+       }
+
        dbus_error_init(&error);
 
        caller = polkit_caller_new_from_dbus_name(connection, sender, &error);
@@ -61,7 +75,7 @@ static int polkit_authorize(const char *sender)
        }
 
        action = polkit_action_new();
-       polkit_action_set_action_id(action, ACTION);
+       polkit_action_set_action_id(action, id);
 
        result = polkit_context_is_caller_authorized(polkit_context,
                                                action, caller, TRUE, NULL);
@@ -162,4 +176,4 @@ static void polkit_exit(void)
 }
 
 CONNMAN_PLUGIN_DEFINE(polkit, "PolicyKit authorization plugin", VERSION,
-                                               polkit_init, polkit_exit)
+               CONNMAN_PLUGIN_PRIORITY_DEFAULT, polkit_init, polkit_exit)