0

Allow to launch selected by user flatpak application, but with additional restrictions, in screen lock. There's probably need to fork pam to allow to define user profiles (Additional names of account and password).

User will configure:
1, Select flatpak app to start, when order this on lock screen
2. Maybe click on checkbox additional restriction, which will force to ran application in more secure maner
3. Give name of application - for example nintyfan-amarok
4. Wrote password for nintyfan-amarok

From now, on lock screen (maybe on login screen too), I can select launch single app, type app name, type password, press enter and - window of amarok will be displayed at top of lock screen.

This would maybe be a security hole, but it's better solution than plasmoids on lock screen, guest account or guest mode.

I have talked with GNOME devs and he opted my idea cause portals - application (our guest) running in flatpak could open each file, because it can use portal.

Idea is to add new switch to flatpak, which will restrict portal file access. App running in this mode could open only files with special attribute or tag (public?), or only files stored in public directory.