Ok got it.... but this behavior does not represent a security issue, having a controller that can perform admin actions even when is not active?
Ok got it.... but this behavior does not represent a security issue, having a controller that can perform admin actions even when is not active?