Elevates permissions in non-sandboxed Swift apps

Elevate Permissions.swift

import Foundation



private func gainPermissions() {
    var authorizationRef: AuthorizationRef? = nil
    var authItem = AuthorizationItem(name: kSMRightBlessPrivilegedHelper, valueLength: 0, value: nil, flags: 0)
    var authRights = AuthorizationRights(count: 1, items: &authItem)
    let flags: AuthorizationFlags = [.interactionAllowed, .preAuthorize, .extendRights]
    var environment = AuthorizationEnvironment()
    
    var authStatus = AuthorizationCreate(&authRights, &environment, flags, &authorizationRef)
    
    guard let authRef = authorizationRef else {
        NSLog("Failed to get authorization! \(authStatus) - \(String(authStatus: authStatus))")
        return
    }
    
    authStatus = AuthorizationCopyRights(authRef, &authRights, &environment, flags, nil)
    
    NSLog("Auth status #\(authStatus) - \(String(authStatus: authStatus))")
}



private extension String {
    init(authStatus: OSStatus) {
        
        switch authStatus {
        case errAuthorizationSuccess:
            self = "Success"
            
        case errAuthorizationDenied:
            self = "Denied"
            
        case errAuthorizationCanceled:
            self = "Cancelled"
            
        case errAuthorizationInternal:
            self = "Internal error"
            
        case errAuthorizationBadAddress:
            self = "Bad address"
            
        case errAuthorizationInvalidRef:
            self = "Invalid reference"
            
        case errAuthorizationInvalidSet:
            self = "Invalid set"
            
        case errAuthorizationInvalidTag:
            self = "Invalid tag"
            
        case errAuthorizationInvalidFlags:
            self = "Invalid flags"
            
        case errAuthorizationInvalidPointer:
            self = "Invalid pointer"
            
        case errAuthorizationToolExecuteFailure:
            self = "Tool execution failure"
            
        case errAuthorizationToolEnvironmentError:
            self = "Tool environment error"
            
        case errAuthorizationExternalizeNotAllowed:
            self = "Reference externalization not allowed"
            
        case errAuthorizationInteractionNotAllowed:
            self = "Interaction not allowed"
            
        case errAuthorizationInternalizeNotAllowed:
            self = "Reference internalization not allowed"
            
        default:
            self = "Unknown auth failure"
        }
    }
}