Skip to main content
Skip to content
Edit this page See source code Create documentation issue Formatting guidelines Style guidelines

XDG Portal Pre-Authorization

Pre-authorize applications to allow usage of XDG portal tech without interactive dialogs

This feature was introduced in Plasma 6.3.

Introduction

Interactive permission prompts are nice, but sometimes users need to authorize access to resources non-interactively.

To solve this, we have a bespoke permission table named kde-authorized in the standard xdg-desktop-portal permission store. Inside this table the user may store pre-authorization to bypass the interactive workflow. To authorize a well-known application, the user can pass the app_id to the set command:

flatpak permission-set kde-authorized remote-desktop org.kde.krdpserver yes

To authorize a host application without an app_id, an empty app_id may be provided:

flatpak permission-set kde-authorized remote-desktop "" yes

Usually the app_id is obtained from flatpak/snap metadata. For host applications, it is obtained from the systemd unit name:

  • For applications that get started by Plasma, those will be set up correctly.
  • For manually created units, the https://systemd.io/DESKTOP_ENVIRONMENTS/ spec should be followed (i.e. name the unit app-org.kde.appname.service).
  • When the name cannot be determined, the empty app_id is used.

Supported Types

  • remote-desktop

Caveats