daemon: allow polkit "io.snapcraft.snapd.manage" for /v2/apps endpoint

pedronis · Feb 23, 2024 · f7fea7f · f7fea7f
1 parent 4e6e3bd
commit f7fea7f
Show file tree

Hide file tree

Showing 2 changed files with 7 additions and 1 deletion.
diff --git a/daemon/api_apps.go b/daemon/api_apps.go
@@ -44,7 +44,7 @@ var (
 		GET:         getAppsInfo,
 		POST:        postApps,
 		ReadAccess:  openAccess{},
-		WriteAccess: authenticatedAccess{},
+		WriteAccess: authenticatedAccess{Polkit: polkitActionManage},
 	}
 
 	logsCmd = &Command{

diff --git a/daemon/api_apps_test.go b/daemon/api_apps_test.go
@@ -167,6 +167,12 @@ func (s *appsSuite) SetUpTest(c *check.C) {
 	d.Overlord().Loop()
 	s.AddCleanup(func() { d.Overlord().Stop() })
 	s.AddCleanup(systemd.MockSystemdVersion(237, nil))
+	s.expectAppsAccess()
+}
+
+func (s *appsSuite) expectAppsAccess() {
+	s.expectOpenAccess()
+	s.expectWriteAccess(daemon.AuthenticatedAccess{Polkit: "io.snapcraft.snapd.manage"})
 }
 
 func (s *appsSuite) TestSplitAppName(c *check.C) {