Gerenal user can reboot the computer by typing the 'reboot' in console
This is a feature, not a bug, since physical access to the console (and keyboard, and usually power switch etc), permits rebooting through other means that are not (and cannot be) password protected. FWIW, typing "reboot" on console as non-root user asks for the user's password before rebooting.