Don’t worry man it’s not a black hat story, the hack was carried out from a normal users account perspective (user was fictional) ‘cause we wanted to see what a normal user can perform with the privileges he / she has.

I did hack the accounts and that is a different story. The same accounts was not used, but the account with the same privileges was used.