indicator-session should check if the user has the right to do those actions, and hide the menus if not.
The problem isn't LTSP specific, it also applies to ssh -X, xdmcp, nx, x2go and more.
I proposed an alternative approach in LP bug #491940, with a patch for gnome-session that made the indicator-session menus reboot/shutdown the LTSP client instead of the server. Unfortunately it never got accepted in Gnome, though a similar one was accepted in LXDE.
indicator-session should check if the user has the right to do those actions, and hide the menus if not.
The problem isn't LTSP specific, it also applies to ssh -X, xdmcp, nx, x2go and more.
I proposed an alternative approach in LP bug #491940, with a patch for gnome-session that made the indicator-session menus reboot/shutdown the LTSP client instead of the server. Unfortunately it never got accepted in Gnome, though a similar one was accepted in LXDE.