In demo mode, staff permissions are simulated in this browser. Real permissions must be enforced by a server.