Bug 495781

Summary:	Using Portal to acquire Screenshot does not require user approval
Product:	[Plasma] xdg-desktop-portal-kde	Reporter:	Kimiblock Moe <kimiblock>
Component:	general	Assignee:	Plasma Bugs List <plasma-bugs-null>
Status:	REPORTED ---
Severity:	normal	CC:	aleixpol, kimiblock, nate
Priority:	NOR
Version First Reported In:	6.2.2
Target Milestone:	---
Platform:	Arch Linux
OS:	Linux
Latest Commit:		Version Fixed/Implemented In:
Sentry Crash Report:

Description Kimiblock Moe 2024-11-04 09:47:02 UTC

SUMMARY
Screenshot does not trigger an authentication dialog. Users have no means to deny such action, this may be a security hole.


STEPS TO REPRODUCE
1. Install ASHPD Demo: https://flathub.org/apps/com.belmoussaoui.ashpd.demo
2. Take a screenshot

OBSERVED RESULT

Screenshot being taken without approval


EXPECTED RESULT

A confirmation dialog appears.


SOFTWARE/OS VERSIONS
Linux/KDE Plasma: 6.2.2
KDE Plasma Version: 6.2.2
KDE Frameworks Version: 6.7.0
Qt Version: 6.8.0