Comment 48 for bug 221363

(In reply to comment #2)
> There is no way to grant an action to an user if the running session is defined
> with is-local=false on ConsoleKit. I use ubuntu 10.04 amd64.I am integrating
> vnc with
> ConsoleKit/PolicyKit and would be nice to allow actions on a local console and
> deny on a remote console, and allow to do it on a remote console if configured
> to do so.

Yes there is a way to do this. It's called <allow_any>.