Authentication vs Authorization

The Scenario

A page is hidden behind a check for "isLoggedIn", but does not check if the user has the required "ADMIN" role.