Currently, I can right click any drive that is attached to the system and click format. No password is asked at all while the data is wiped. I can also format any drive from the disk utility. This brings back scary memories of Windows -- how can I make it ask for a password?
Unix is featuring a groups system. You can easily avoid certain users from doing things, by removing them from the required group. That means they can start the program, but it won't be able to do anything! You can see the groups of the currently logged in user by the "groups" command.
Use "gpasswd" to remove the desired user from the "disk" and "storage" group.
Of course you must also remove him from the "wheel" group, so that he cannot use "sudo" to become another user(root).
You can add password by using launcher properties. All you have to do,