We developed an authorization plugin with our custom UI. It worked perfectly on El Capitan and Sierra.
But on High Sierra it stopped invoking when a user clicks the lock item in System.Preferences.
To invoke our plugin, we changed the authenticate right in the authorization database.
{ 'class' : 'evaluate-mechanisms', 'mechanisms' : [ 'builtin:authenticate', 'builtin:reset-password,privileged', 'builtin:authenticate,privileged', 'PKINITMechanism:auth,privileged' ], 'shared' : 'true', 'tries' : '10000' }Actually, we replaced builtin:authenticate with a mechanism from our plugin. We found that the authenticate right is not invoked on High Sierra, when a user clicks any locks in System.preferences.Is that a bugs? Are there any other ways to invoke a custom UI mechanism for unlocking?