1# Bundle Manager Subsystem Changelog 2 3## cl.bundlemanager.1 Forbidding bm Commands for Cross-User Operations 4 5**Access Level** 6 7Public API 8 9**Reason for Change** 10 11The bm tool does not authenticate the identity of users invoking **sh**. Consequently, user A can run bm commands to install and uninstall applications in other user spaces, and discover applications installed there. This violates security standards. 12 13**Change Impact** 14 15This change is a non-compatible change. 16 17Before change: 18 19A user can use the **-u** parameter to specify other users in the following bm commands: **install**, **uninstall**, **dump**, **clean**, **disable** (for root users only), and **enable** (for root users only). 20 21After change: 22 23A user can no longer use the **-u** parameter to specify other users in the bm commands **install**, **uninstall**, **dump**, **clean**, **disable**, and **enable**. They are restricted to managing their own applications. 24 25**Start API Level** 26 2713 28 29**Change Since** 30 31OpenHarmony 5.0.0.52 32 33**Key API/Component Changes** 34 35bm tool 36 37**Adaptation Guide** 38 39To manipulate another user's application, it is necessary to log in as that user before proceeding with the bm commands. 40