It was found that csd-datetime-setting SetDate DBUS function does not check the polkit authorization for the caller, Unlike SetTime.
{ "section": "core" }
"https://advisories.mageia.org/MGASA-2017-0218.json"