But just because a user proved their identity doesn't mean that they can do whatever they want in your application.

但是仅仅证明了一个用户的身份并不意味着他们可以对你的应用为所欲为。