OSStatus status;
    AuthorizationRef authorizationRef;

    // AuthorizationCreate and pass NULL as the initial
    // AuthorizationRights set so that the AuthorizationRef gets created
    // successfully,and then later call AuthorizationCopyRights to
    // determine or extend the allowable rights.
    // http://developer.apple.com/qa/qa2001/qa1172.html
    status = AuthorizationCreate(NULL,kAuthorizationEmptyEnvironment,kAuthorizationFlagDefaults,&authorizationRef);
    if (status != errAuthorizationSuccess)
    {
        NSLog(@"Error Creating Initial Authorization: %d",status);
        return status;
    }

    // kAuthorizationRightExecute == "system.privilege.admin"
    AuthorizationItem right = {kAuthorizationRightExecute,NULL,0};
    AuthorizationRights rights = {1,&right};
    AuthorizationFlags flags = kAuthorizationFlagDefaults | kAuthorizationFlagInteractionAllowed | kAuthorizationFlagPreAuthorize | kAuthorizationFlagExtendRights;

    // Call AuthorizationCopyRights to determine or extend the allowable rights.
    status = AuthorizationCopyRights(authorizationRef,&rights,flags,NULL);
    if (status != errAuthorizationSuccess)
    {
        NSLog(@"Copy Rights Unsuccessful: %d",status);
    }
    return status;

哪个工作正常,提出一个标准的os密码对话框,要求输入管理员密码.根据返回的状态启用/禁用首选项的nib中的各种控件.但是,现在我正在尝试使用SandBox应用程序,此代码始终返回errAuthorizationDenied.我已经查看了AuthorizationCopyRights和AuthorizationCreate的doc,但我看不到在SandBoxed环境中使用它们的参考.

我尝试过各种各样的AuthorizationFlags标志,但它总是一样的结果.有没有办法修改上面的代码在沙盒中工作,或者这些天是否要求管理员密码？