/*  
 *  /etc/polkit-1/rules.d/20-disable-unpriv-control-power-net-disk.rules  
 *   prevent unpriv. users doing mischief e.g. on shared server 
 *  made 2023-05, 
 */ 


polkit.addRule( function(action, subject) {
 
    const power_actions = [
        'org.freedesktop.login1.reboot',
        'org.freedesktop.login1.reboot-multiple-sessions',
        'org.freedesktop.login1.power-off',
        'org.freedesktop.login1.power-off-multiple-sessions',
	'org.freedesktop.login1.suspend', 
        'org.freedesktop.login1.suspend-multiple-sessions', 
        'org.freedesktop.login1.hibernate', 
        'org.freedesktop.login1.hibernate-multiple-sessions', 
    ]; 

    if ( power_actions.includes( action.id ) ) {

        /* let result = polkit.Result.AUTH_ADMIN;  // give them a change (password question)  */
        let result = polkit.Result.NO;

        if ( subject.isInGroup( 'wheel' ) ) {
            result = polkit.Result.YES;
        }

        return result;

    }  

} );


polkit.addRule(function(action, subject) {

    if (action.id.indexOf("org.freedesktop.NetworkManager.") == 0) {

	let result = polkit.Result.NO;

	if ( subject.isInGroup( 'wheel' ) ) {
            result = polkit.Result.YES;
        }
	
        return result; 
    }
});


polkit.addRule(function(action, subject) {

    if (action.id.indexOf("org.freedesktop.udisks2.") == 0) {

	let result = polkit.Result.NO;

	if ( subject.isInGroup( 'wheel' ) ) {
            result = polkit.Result.YES;
        }
	
        return result; 
    }
});