diff --git a/base/activation-manuelle/users.nix b/base/activation-manuelle/users.nix
index 953af39..242e471 100644
--- a/base/activation-manuelle/users.nix
+++ b/base/activation-manuelle/users.nix
@@ -92,4 +92,12 @@ in {
     hashedPassword = "$6$RuwEVVml$JnSb62qFrtBJY1CfC9uE0YK2qd2TpnNmlXNeQ62ludb3mkV8AMUVEj3R9jTKtOfLt/ap6jGVmakotGtHczBHL/";
     uid = 1103;
   };
+} // {
+  assertions = [
+    {
+      assertion = (profiles.isPrunetwork  && (config.security.sudo.wheelNeedsPassword == true))
+                || (!profiles.isPrunetwork && true); # pas prunetwork = pas de poliique
+      message = "Faire sudo nécessite un mot de passe";
+    }
+  ];
 }