diff -Nur dde-daemon-3.2.7/misc/polkit-action/com.deepin.daemon.accounts.policy dde-daemon-3.2.7-new/misc/polkit-action/com.deepin.daemon.accounts.policy
--- dde-daemon-3.2.7/misc/polkit-action/com.deepin.daemon.accounts.policy	2017-11-28 11:31:45.000000000 +0800
+++ dde-daemon-3.2.7-new/misc/polkit-action/com.deepin.daemon.accounts.policy	2017-11-29 15:57:49.641270102 +0800
@@ -70,8 +70,8 @@
     <message xml:lang="zh_CN">修改您的用户数据：需要授权</message>
     <message xml:lang="zh_TW">若要變更您自身的使用者資料需要通過認證</message>
     <defaults>
-      <allow_any>no</allow_any>
-      <allow_inactive>no</allow_inactive>
+      <allow_any>auth_admin</allow_any>
+      <allow_inactive>auth_admin</allow_inactive>
       <allow_active>auth_self</allow_active>
     </defaults>
   </action>
@@ -140,8 +140,8 @@
     <message xml:lang="zh_CN">修改用户数据：需要授权</message>
     <message xml:lang="zh_TW">若要變更使用者資料需要通過認證</message>
     <defaults>
-      <allow_any>no</allow_any>
-      <allow_inactive>no</allow_inactive>
+      <allow_any>auth_admin</allow_any>
+      <allow_inactive>auth_admin</allow_inactive>
       <allow_active>auth_admin_keep</allow_active>
     </defaults>
   </action>
@@ -210,8 +210,8 @@
     <message xml:lang="zh_CN">修改登录窗口配置：需要授权</message>
     <message xml:lang="zh_TW">若要變更登入畫面組態需要通過認證</message>
     <defaults>
-      <allow_any>no</allow_any>
-      <allow_inactive>no</allow_inactive>
+      <allow_any>auth_admin</allow_any>
+      <allow_inactive>auth_admin</allow_inactive>
       <allow_active>auth_admin_keep</allow_active>
     </defaults>
   </action>
diff -Nur dde-daemon-3.2.7/misc/polkit-action/com.deepin.daemon.Grub2.policy.in dde-daemon-3.2.7-new/misc/polkit-action/com.deepin.daemon.Grub2.policy.in
--- dde-daemon-3.2.7/misc/polkit-action/com.deepin.daemon.Grub2.policy.in	2017-11-28 11:31:45.000000000 +0800
+++ dde-daemon-3.2.7-new/misc/polkit-action/com.deepin.daemon.Grub2.policy.in	2017-11-29 15:58:19.296468907 +0800
@@ -10,8 +10,8 @@
     <description>Change the grub2 configuration</description>
     <message>Authentication is required to change the grub2 configuration</message>
     <defaults>
-      <allow_any>no</allow_any>
-      <allow_inactive>no</allow_inactive>
+      <allow_any>auth_admin</allow_any>
+      <allow_inactive>auth_admin</allow_inactive>
       <allow_active>auth_admin_keep</allow_active>
     </defaults>
   </action>