From 56d012ed244faec6a693debf181f9d69b753f21f Mon Sep 17 00:00:00 2001
From: mkasik <mkasik@fedoraproject.org>
Date: Tue, 23 Feb 2010 13:17:34 +0000
Subject: [PATCH] - Allow inactive users and any user to authenticate -
 Resolves: #543085

---
 allow_authentication.patch | 102 +++++++++++++++++++++++++++++++++++++
 cups-pk-helper.spec        |   8 ++-
 2 files changed, 109 insertions(+), 1 deletion(-)
 create mode 100644 allow_authentication.patch

diff --git a/allow_authentication.patch b/allow_authentication.patch
new file mode 100644
index 0000000..17be7e9
--- /dev/null
+++ b/allow_authentication.patch
@@ -0,0 +1,102 @@
+--- cups-pk-helper-0.0.4/src/org.opensuse.cupspkhelper.mechanism.policy.in	2009-12-02 16:43:41.000000000 +0100
++++ cups-pk-helper-0.0.4/src/org.opensuse.cupspkhelper.mechanism.policy.in	2009-12-03 14:13:47.000000000 +0100
+@@ -15,7 +15,8 @@
+     <description>Set a printer as default printer</description>
+     <message>Privileges are required to set a printer, or a class, as default printer.</message>
+     <defaults>
+-      <allow_inactive>no</allow_inactive>
++      <allow_any>auth_admin</allow_any>
++      <allow_inactive>auth_admin</allow_inactive>
+       <allow_active>auth_admin_keep</allow_active>
+     </defaults>
+   </action>
+@@ -27,7 +28,8 @@
+     <description>Enable/Disable a printer</description>
+     <message>Privileges are required to enable/disable a printer, or a class.</message>
+     <defaults>
+-      <allow_inactive>no</allow_inactive>
++      <allow_any>auth_admin</allow_any>
++      <allow_inactive>auth_admin</allow_inactive>
+       <allow_active>auth_admin_keep</allow_active>
+     </defaults>
+   </action>
+@@ -36,7 +38,8 @@
+     <description>Add/Remove/Edit a local printer</description>
+     <message>Privileges are required to add/remove/edit a local printer.</message>
+     <defaults>
+-      <allow_inactive>no</allow_inactive>
++      <allow_any>auth_admin</allow_any>
++      <allow_inactive>auth_admin</allow_inactive>
+       <allow_active>auth_admin_keep</allow_active>
+     </defaults>
+   </action>
+@@ -45,7 +48,8 @@
+     <description>Add/Remove/Edit a remote printer</description>
+     <message>Privileges are required to add/remove/edit a remote printer.</message>
+     <defaults>
+-      <allow_inactive>no</allow_inactive>
++      <allow_any>auth_admin</allow_any>
++      <allow_inactive>auth_admin</allow_inactive>
+       <allow_active>auth_admin_keep</allow_active>
+     </defaults>
+   </action>
+@@ -54,7 +58,8 @@
+     <description>Add/Remove/Edit a class</description>
+     <message>Privileges are required to add/remove/edit a class.</message>
+     <defaults>
+-      <allow_inactive>no</allow_inactive>
++      <allow_any>auth_admin</allow_any>
++      <allow_inactive>auth_admin</allow_inactive>
+       <allow_active>auth_admin_keep</allow_active>
+     </defaults>
+   </action>
+@@ -63,7 +68,8 @@
+     <description>Get/Set server settings</description>
+     <message>Privileges are required to get/set server settings.</message>
+     <defaults>
+-      <allow_inactive>no</allow_inactive>
++      <allow_any>auth_admin</allow_any>
++      <allow_inactive>auth_admin</allow_inactive>
+       <allow_active>auth_admin_keep</allow_active>
+     </defaults>
+   </action>
+@@ -72,7 +78,8 @@
+     <description>Restart/Cancel/Edit a job</description>
+     <message>Privileges are required to restart/cancel/edit a job.</message>
+     <defaults>
+-      <allow_inactive>no</allow_inactive>
++      <allow_any>auth_admin</allow_any>
++      <allow_inactive>auth_admin</allow_inactive>
+       <allow_active>yes</allow_active>
+     </defaults>
+   </action>
+@@ -81,7 +88,8 @@
+     <description>Restart/Cancel/Edit a job owned by another user</description>
+     <message>Privileges are required to restart/cancel/edit a job owned by another user.</message>
+     <defaults>
+-      <allow_inactive>no</allow_inactive>
++      <allow_any>auth_admin</allow_any>
++      <allow_inactive>auth_admin</allow_inactive>
+       <allow_active>auth_admin_keep</allow_active>
+     </defaults>
+   </action>
+@@ -90,7 +98,8 @@
+     <description>Get devices</description>
+     <message>Privileges are required to get devices.</message>
+     <defaults>
+-      <allow_inactive>no</allow_inactive>
++      <allow_any>auth_admin</allow_any>
++      <allow_inactive>auth_admin</allow_inactive>
+       <allow_active>auth_admin_keep</allow_active>
+     </defaults>
+   </action>
+@@ -100,7 +109,8 @@
+     <description>Add/Remove/Edit a printer</description>
+     <message>Privileges are required to add/remove/edit a printer.</message>
+     <defaults>
+-      <allow_inactive>no</allow_inactive>
++      <allow_any>auth_admin</allow_any>
++      <allow_inactive>auth_admin</allow_inactive>
+       <allow_active>auth_admin_keep</allow_active>
+     </defaults>
+   </action>
diff --git a/cups-pk-helper.spec b/cups-pk-helper.spec
index 5d46c4f..798430a 100644
--- a/cups-pk-helper.spec
+++ b/cups-pk-helper.spec
@@ -1,6 +1,6 @@
 Name:           cups-pk-helper
 Version:        0.0.4
-Release:        8%{?dist}
+Release:        9%{?dist}
 Summary:        A helper that makes system-config-printer use PolicyKit
 
 Group:          System Environment/Base
@@ -13,6 +13,7 @@ Patch1:         get_devices.patch
 Patch2:         polkit_result.patch
 Patch3:         edit_job.patch
 Patch4:         cups-pk-helper-ppd-name.patch
+Patch5:         allow_authentication.patch
 
 BuildRoot:      %{_tmppath}/%{name}-%{version}-%{release}-root-%(%{__id_u} -n)
 
@@ -47,6 +48,7 @@ interfaces available under control of PolicyKit.
 %patch2 -p1 -b .polkit-result
 %patch3 -p1 -b .edit-job
 %patch4 -p1 -b .ppd-name
+%patch5 -p1 -b .allow_auth
 
 %build
 # Patch0 modifies configure.ac
@@ -76,6 +78,10 @@ rm -rf $RPM_BUILD_ROOT
 
 
 %changelog
+* Tue Feb 23 2010 Marek Kasik <mkasik@redhat.com> - 0.0.4-9
+- Allow inactive users and any user to authenticate
+- Resolves: #543085
+
 * Wed Sep 30 2009 Marek Kasik <mkasik@redhat.com> - 0.0.4-8
 - Fix adding of printers without specification of device-uri.
 - Patch by Tim Waugh.