Description of problem:
Update System asks for a root password.
Update of a single package asks for the user's password.
Version-Release number of selected component (if applicable):
Yep, looks like a typo in our policy file. Fixed in git. Now admin password is
required for both actions.