I don't understand this, `context` is passed to the auth function as a param (by whatever part of CKAN calls it - `check_access` or `is_authorized` or something), so the action function must be able to assume it's correct (plugin developers are obviously going to assume they can use params that CKAN passes to their functions).