sddm should be asking systemd-logind whether it CanReboot / CanPowerOff and systemd-logind should be following PolicyKit (unless sddm runs as root). You can try the PolicyKit configuration from
Disable Restart and Shutdown is ignored · Issue #1976 · sddm/sddm