Affe Null@lanodan I agree with this, especially regarding Polkit! I'd like to point though that the second option doesn't require setuid. By "system-wide", I mean running the daemon as root or as a dedicated user with necessary permissions, so the daemon would expose its D-Bus API on the system bus and access would just be restricted to a certain group. The setuid thing is another option that's closer to "as the user" but avoids assigning permissions directly.
GNU social JP is a social network, courtesy of GNU social JP管理人. It runs on GNU social, version 2.0.2-dev, available under the GNU Affero General Public License.
All GNU social JP content and data are available under the Creative Commons Attribution 3.0 license.