Comment 1 for bug 358086

Thanks for reporting this issue.

PolicyKit was written to give access rights to ordinary users without giving them root credentials. If your user had the right to administer users using PolicyKit, than this is expected behaviour.

Closing this bug. Please feel free to reopen it if you can reproduce it without your unprivileged user having PolicyKit rights.