Non admin users unlock Security & Privacy System Preference Pane

[tknight-MSCG]

I'm trying to allow non admin users the ability to unlock the Security & Privacy System Preference Pane. I have to push out a plug in that requires the user to add it to the Accessibility field in the Privacy tab.

I’m looking to do what I did to enable non-admin users to add printers via this command…

sudo dseditgroup -o edit -n /Local/Default -a everyone -t group lpadmin

So far I haven't found a similar command to allow me to do this. I did come across this article in a blog, but am not familiar with the tool...

http://www.dssw.co.uk/reference/authorization-rights/system-preferences-security.html

Has anyone else been able to do this or perhaps have an alternative method for me to get this done? All suggestions are welcome

[hkabik]

This should do it.

#!/bin/sh

security authorizationdb write system.preferences allow
security authorizationdb write system.preferences.security allow

Related request: If any one knows a way to ONLY allow access to that Privacy tab of Security, I'd really like to hear how to do that.

[tknight-MSCG]

I am assuming I can reverse this after the "push" is complete??

[hkabik]

security authorizationdb write system.preferences.security admin

To reverse.

[tknight-MSCG]

I tried this, got a response YES (0) two times and was still unable to unlock the system pref.

[tknight-MSCG]

Found a few other threads about the same issue...

https://list.jamfsoftware.com/jamf-nation/discussions/20713/allow-security-preference-pane-non-admin

[hkabik]

I'll take a look at it, not sure what I got wrong there...

[hkabik]

Ah, interesting... didn't know that was limited.