But it "doesn't" know who you are if you have not logged in. Or do you mean that the permission isn't container-specific?

(Of course it can probably make a pretty good guess, just as well it could do before this change.)