dnfdaemon: Offline transaction management only for admin

rpm-software-management · Jun 18, 2024 · 880ae2b · 880ae2b
1 parent 78d7390
commit 880ae2b
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/dnf5daemon-server/services/offline/offline.cpp b/dnf5daemon-server/services/offline/offline.cpp
@@ -72,6 +72,9 @@ sdbus::MethodReply Offline::check_pending(sdbus::MethodCall & call) {
 }
 
 sdbus::MethodReply Offline::clean(sdbus::MethodCall & call) {
+    if (!session.check_authorization(dnfdaemon::POLKIT_EXECUTE_RPM_TRANSACTION, call.getSender())) {
+        throw std::runtime_error("Not authorized");
+    }
     std::string error_msg;
     dnfdaemon::KeyValueMap options;
     call >> options;
@@ -97,6 +100,9 @@ sdbus::MethodReply Offline::clean(sdbus::MethodCall & call) {
 }
 
 sdbus::MethodReply Offline::set_finish_action(sdbus::MethodCall & call) {
+    if (!session.check_authorization(dnfdaemon::POLKIT_EXECUTE_RPM_TRANSACTION, call.getSender())) {
+        throw std::runtime_error("Not authorized");
+    }
     bool success{false};
     std::string error_msg{};
     // try load the offline transaction state