Description of problem:
The "users" area of settings allows fingerprint data to be set/cleared without authentication
Version-Release number of selected component (if applicable):
Steps to Reproduce:
1. Walk up to someone's session
2. Open Settings->Users
3. Set your fingerprint to log in
Anyone can override existing fingerprint login with their own
It should require the "users" panel to be unlocked before manipulating fingerprint settings.
Looks like this was previously reported as #827968 but was closed unfixed.
Already been filed upstream: