Comment by tptacek

This is authz bypass, not authn, right? You're an unprivileged user and can assume privileged roles.