Apple macOS 10.13.1 – Run file with user permissions without his password

So I have found the bug.

The bug which allowed me to log into user LOCKED session, browse websites with his saved credentials, paste the command into CLI, view emails, and even RUN ANY APPLICATION WITH PERMISSIONS.

This everything without password.