SarkariMohar Editorial
Your server-side role and session determine access. Browser-supplied roles are ignored.