@Matthew,
At least bug #855556 seems to have the same core problem.
I've published a workaround in bug #855556 that i'm going to copy here, and fix this bug (#861171) and bug #855556.
I think the problem is only related to PolicyKit, because this doesn't handle correctly the 'auth_admin_keep' directive. When an admin user try to halt/restart the system, this directive may ask for admin password an allow only to admin users to halt/restart the system.
The workaround goes through modify the 'auth_admin_keep' to 'yes', which allow to any user (admin o desktop user) to halt/restart the system.
This is not a full solution, but may be a step forward.
@Matthew,
At least bug #855556 seems to have the same core problem.
I've published a workaround in bug #855556 that i'm going to copy here, and fix this bug (#861171) and bug #855556.
I think the problem is only related to PolicyKit, because this doesn't handle correctly the 'auth_admin_keep' directive. When an admin user try to halt/restart the system, this directive may ask for admin password an allow only to admin users to halt/restart the system.
The workaround goes through modify the 'auth_admin_keep' to 'yes', which allow to any user (admin o desktop user) to halt/restart the system.
This is not a full solution, but may be a step forward.