test.pol

<!-- ppm Authentication policies -->

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE policyconfig PUBLIC
  "-//freedesktop//DTD PolicyKit Policy Configuration 1.0//EN"
  "http://www.freedesktop.org/standards/PolicyKit/1.0/policyconfig.dtd">
<policyconfig>
  <action id="io.ppm.authentication">
    <description>Modify system packages with ppm.</description>
    <message>Authentication is required to perform system package modifications.</message>
    <defaults>
      <!-- Default policies -->
      <allow_any>no</allow_any>           <!-- Block non-admin users -->
      <allow_inactive>yes</allow_inactive> <!-- Block inactive sessions -->
      <allow_active>auth_admin</allow_active> <!-- Allow only active admin sessions -->
    </defaults>
    <annotate key="org.freedesktop.policykit.exec.path">/usr/bin/ppm</annotate>
    <annotate key="org.freedesktop.policykit.exec.allow_gui">true</annotate>
  </action>
</policyconfig>