Further analysis showed that it's not possible to add a policykit check into the can_{suspend,hibernate} properties. This needs changing the DK-P D-Bus API to replace the properties with method calls, check PolicyKit in those method calls, wrapping the new D-Bus call into a new libdevkit-power-gobjec and rewire the clients (gnome-session, indicator-applet, gnome-power-prefs) to use the new method instead of the gobject property.
This is therefore not SRUable, it's way too intrusive.
Further analysis showed that it's not possible to add a policykit check into the can_{suspend, hibernate} properties. This needs changing the DK-P D-Bus API to replace the properties with method calls, check PolicyKit in those method calls, wrapping the new D-Bus call into a new libdevkit- power-gobjec and rewire the clients (gnome-session, indicator-applet, gnome-power-prefs) to use the new method instead of the gobject property.
This is therefore not SRUable, it's way too intrusive.