Oversimplified

SFAuthorization+withAdminPrivileges.swift

import ServiceManagement
import SecurityFoundation

extension SFAuthorization {
    
    enum Error: LocalizedError {
        case allocationError
    }
    
    class func withAdminPrivileges(prompt: String? = nil) throws -> SFAuthorization {
        
        guard let authorization = SFAuthorization.authorization() as? SFAuthorization else {
            throw Error.allocationError
        }
        
        var environment = AuthorizationEnvironment()
        
        if let prompt = prompt {
            let itemNamePtr = (kAuthorizationEnvironmentPrompt as NSString).utf8String!
            let promptPtr = (prompt as NSString).utf8String
            var envItem = AuthorizationItem(name: itemNamePtr,
                                            valueLength: prompt.lengthOfBytes(using: .utf8),
                                            value: UnsafeMutablePointer(mutating: promptPtr),
                                            flags: 0)
            environment = AuthorizationEnvironment(count: 1, items: &envItem)
        }
        
        var right = AuthorizationItem(name: kAuthorizationRightExecute,
                                      valueLength: 0,
                                      value: nil,
                                      flags: 0)
        
        var rights = AuthorizationRights(count: 1, items: &right)
        
        
        try authorization.obtain(withRights: &rights,
                                 flags: [.extendRights, .interactionAllowed],
                                 environment: &environment,
                                 authorizedRights: nil)
        
        return authorization
    }
    
}