Bug 415822 - Discover Software Manager allows package updates without prompt for password authentication
Summary: Discover Software Manager allows package updates without prompt for password ...
Status: RESOLVED DOWNSTREAM
Alias: None
Product: Discover
Classification: Applications
Component: discover (other bugs)
Version First Reported In: 5.12.8
Platform: Kubuntu Linux
: NOR critical
Target Milestone: ---
Assignee: Dan Leinir Turthra Jensen
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2020-01-02 21:44 UTC by LeeP
Modified: 2020-01-06 23:39 UTC (History)
2 users (show)

See Also:
Latest Commit:
Version Fixed/Implemented In:
Sentry Crash Report:

Attachments
Add an attachment

Note You need to log in before you can comment on or make changes to this bug.
Description LeeP 2020-01-02 21:44:24 UTC 
SUMMARY
Discover Software Manager allows package updates without prompt for password authentication
STEPS TO REPRODUCE
1.Boot Discover  
2.Select Update Button
3. Select Update All 

OBSERVED RESULT
Updates package without password authentication.

EXPECTED RESULT
Dialoge box requiring password authentication before package update.


SOFTWARE/OS VERSIONS
Windows: 
macOS: 
Kubuntu: 18.04 
(available in About System)
KDE Plasma Version: 5.12.9
KDE Frameworks Version:5.44.0 
Qt Version: 5.9.5

ADDITIONAL INFORMATION
Kernal:5.3.0-26-generic
Comment 1 Nate Graham 2020-01-06 23:39:19 UTC 
This depends on entirely on the disreo's PackageKit authentication settings, which Discover then honors. openSUSE does the same thing IIRC.

If it's unnerving you, please report this to the Kubuntu people.