XML callback security

Hello,

I want to write an extension to do a content based access control.

I would like to know if it’s possible to invoke XML callbacks without security checks or to switch user identity within the extension code before calling the callback functions.

Thanks.