Thanks to some helpful off-list replies and to additional research,
for a casual reader:

This access control is implemented via udev and elogind which *is* systemd code and architecture.
This is supposed to "just work", for some definition of "work".
When it does not, you face a challenge (a systemd issue from 2016 about the lack of documentation for uaccess vs ID_* is still open).

/D

-----Original Message-----
From: Dng [mailto:dng-bounces@lists.dyne.org] On Behalf Of dal
Sent: den 25 maj 2020 15:32
To: 'dng@???' <dng@???>
Subject: [DNG] supported ways to control user access to audio/video devices

Dear list,

A round of searching and reading did not give me any usable
explanation of Subj on Devuan.

More specifically, static assignment of users to the "audio"/"video"
groups is not applicable (on shared, remotely accessible computers).

It looks like ConsoleKit used to be the answer in Debian,
but in my testing on Beowulf the consolekit package is not compatible
with any desktop environment besides xfce.

Is this an inherent limitation somewhere, a packaging bug
or otherwise a misunderstanding on my part?

Regards,
/D
_______________________________________________
Dng mailing list
Dng@???
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng