Bug 504955

Summary: Authorizing devices not working as expected
Product: [Applications] systemsettings Reporter: Iyán M. V. <me>
Component: kcm_thunderboltAssignee: Plasma Bugs List <plasma-bugs-null>
Status: CONFIRMED ---    
Severity: normal CC: dvratil, kdedev, nate
Priority: NOR    
Version First Reported In: 6.3.90   
Target Milestone: ---   
Platform: Arch Linux   
OS: Linux   
Latest Commit: Version Fixed/Implemented In:
Sentry Crash Report:
Attachments: Screenshot 1
Screenshot 2
Screenshot 3

Description Iyán M. V. 2025-05-29 11:28:35 UTC
Created attachment 181857 [details]
Screenshot 1

SUMMARY
When attaching a new docking station using thunderbolt, a notification appears asking the user to "Authorize Now" or "Authorize Permanently" the device (Screenshot 1). Selecting any of these two options results in a new notification showing an error message, slightly different depending on which was option was selected. Screenshot 2 is when selecting "Authorize Now" and Screenshot 3 when selecting "Authorize Permanently".

In both cases, the error seems misleading since the device is shown as connected and trusted in System Settings, and everything works as expected (external monitor, ethernet, etc.). The "Authorize Now" also does not work as expected since the device is permanently trusted. This can be tested by disconnecting the device, connecting again. No notification is shown asking again for authorization and the thunderbolt device works directly without any user intervention.

In addition, the list in System Settings -> Thunderbolt is, in my opinion, confusing for several reasons. There is no button to delete devices, only a button to "Revoke Trust". But if this button is clicked, the device is deleted from the list. What if the user wants to simply remove permanently trust on the device, so that authorization has to be given manually each time the device is connected?

STEPS TO REPRODUCE
1. Go to System Settings -> Thunderbolt and revoke trust on all devices
2. Attach a docking station using thunderbolt and select "Authorize Now"
3. Disconnect thunderbolt, and connect again

OBSERVED RESULT
Thunderbolt is authorized and trusted permanently despite selecting "Authorize Now".

EXPECTED RESULT
It is not clear and not explain in the System Settings menu what is the difference between "Authorized" and "Trusted". This should be explained somewhere. Also, the hint says "An unstrusted device needed to be manually authorized each time it is connected to the computer", but the user is never asked if a device is trusted or not, only if it should be authorized now or permanently. With that model, I guess "Authorize Now" -> "Untrusted", and "Authorize Permanently" -> "Trusted", but this is also not the observed behavior as shown above.

SOFTWARE/OS VERSIONS
Operating System: Arch Linux 
KDE Plasma Version: 6.3.90
KDE Frameworks Version: 6.14.0
Qt Version: 6.9.0
Kernel Version: 6.14.7-arch2-1 (64-bit)
Graphics Platform: Wayland
Processors: 22 × Intel® Core™ Ultra 7 155H
Memory: 32 GiB of RAM (30.9 GiB usable)
Graphics Processor: Intel® Arc
Manufacturer: LENOVO
Product Name: 21KDS00600
System Version: ThinkPad X1 Carbon Gen 12
Comment 1 Iyán M. V. 2025-05-29 11:28:49 UTC
Created attachment 181858 [details]
Screenshot 2
Comment 2 Iyán M. V. 2025-05-29 11:28:59 UTC
Created attachment 181859 [details]
Screenshot 3
Comment 3 TraceyC 2025-05-29 16:19:44 UTC
I tested this on git-master, using a Dell XPS and the same dock model WD22TB4
Using the steps provided, I didn't see the same error, but it looks like the trust state is not being saved

Note: The laptop must be connected to the dock to revoke trust, I started with it connected
1. Go to System Settings -> Thunderbolt and revoke trust on the dock
2. Disconnect and reconnect the dock
Observed: The dock is still shown as "Connected & Authorized, Trusted - not ok

1. Go to System Settings -> Thunderbolt and revoke trust on the dock
2. Disable and re-enable Thunderbolt using the toggle in settings
3. Disconnect and reconnect the dock
Observed: The dock is still shown as "Connected & Authorized, Trusted - not ok