They shouldn't be able to do that, because it's a huge security hole.