Hello! Halt on Linux is disabled for average user by default. It will try to request sudo/root password and if fails returns:
sasha@fedora:~$ systemctl halt
Call to Halt failed: Access denied
How can I make same behavior for poweroff action? I know it is possible somehow via PolicyKit rulle
Well, the logic in polkit is, if you have direct physical access to the machine (not SSH, actual keyboard, and so on), in general nothing stops you from just pressing and holding the power button. So giving a local user the right doesn’t make worse.
To disable the behaviour you need to find the appropriate polkit rule in
/usr/{lib,share}/polkit-1/rules.dand create a file with the same name in/etc/polkit-1/rules.dpointing to/dev/null.