If they can edit a service that runs with more privileges than they have, that's a privilege escalation vulnerability. Polkit lets a non-root user restart a ro

If they can edit a service that runs with more privileges than they have, that's a privilege escalation vulnerability. Polkit lets a non-root user restart a root/privileged service without letting the non-root user gain privileges.