If I recall correctly, the little lock icon in System Preferences used to prevent changes without unlocking it and providing username and password. Either my macOS is broken, or this isn't the case anymore.
Here is a little animated GIF showing that I can make random changes in the Security and Privacy system settings without unlocking.
I'm running 10.15.2 macOS Catalina. Am I mistaken on the purpose of this lock? Did it change at some point? Or is my macOS just insecure?
Best Answer
On Mojave, the categories with no padlock requirement are Contacts, Calendars, (no app has requested access to Reminders yet), Photos, Camera, Microphone, Automation and Advertising.
Those requiring Admin password are Location, Accessibility and Full Disk Access.
Analytics does not require unlocking to change Share iCloud Analytics but does for Share Mac Analytics and Share with App Developers which are otherwise input inhibited.
Former list permissions didn't require me to enter root password as far as I remember. So it shouldn't ask on a later time either.
You can check whether password is required or not by
or any other item like
AddressBook
. See this blog for the samehttps://www.felix-schwarz.org/blog/2018/08/new-apple-event-apis-in-macos-mojave or
man tccutil
.As for those protected ones,
+-
buttons are given and they are greyed out if padlock is locked.