2006-02-05 23:54:16 |
Stuart Langridge |
description |
The Show Updates system requires the user to enter their password just to see what updates are pending, when it shouldn't need to. Ask for the password when it's required, which is when the user decides to actually install those updates. The current state is bad for two reasons: it violates the Principle of Least Privilege, because it asks for permissions (sudo'ed root) that it doesn't need (to show the pending updates), and because it makes it awkward to just see what's outstanding (because it changes a one-mouse-click process into a click-and-enter-your-password process). |
The Software Updates applet requires the user to enter their password just to see what updates are pending, when it shouldn't need to. Ask for the password when it's required, which is when the user decides to actually install those updates. The current state is bad for two reasons: it violates the Principle of Least Privilege, because it asks for permissions (sudo'ed root) that it doesn't need (to show the pending updates), and because it makes it awkward to just see what's outstanding (because it changes a one-mouse-click process into a click-and-enter-your-password process). |
|