Another couple of suggestions for issues I often encounter: 1. Include reboot/shutdown items in the menu, at least for the root user. If not the root user, check if it is a local login (not over X), then prompt user for root password.
2. Include menu items for reboot and shutdown in dtlogin. If a user has access to the login manager then he probably has access to the box and it's power switch. Prompt to make sure. Maybe require the root password. This message posted from opensolaris.org
