Signing in proves who you are. It does not prove you may edit post 42. Broken access control is number one in the OWASP Top 10, and its most common form is a missing ownership check.