add security checks for AddAuthorization() and RemoveAuthorization()

For now this is restricted to uid 0; going to revisit this when
hacking on the GNOME authorization UI.

1 files changed, 6 insertions, 1 deletions

diff --git a/docs/TODO b/docs/TODO
index aa27f12..36c1eec 100644
--- a/docs/TODO
+++ b/docs/TODO
@@ -32,7 +32,12 @@ Core TODO items
  - PolkitAuthority probably needs locking around its singleton for
    multithreaded backends.
 
- - symbol visibility in shared libraries
+ - rethink actions shipped with PolicyKit; we probably just want something
+   simple like
+   - org.freedesktop.policykit1.read
+   - org.freedesktop.policykit1.localauthority.manage
+
+ - restrict symbol visibility in shared libraries
 
 Backend TODO items
 ------------------