TYPO3.Flow

I cant believe that this is a bug, but I don't understand what I am doing wrong.

I am doing some database manipulation in my authentication provider. This invokes the security context to get the roles of the user, due to ACLs. But the roles dont get loaded again and are set to 'Everybody' and 'anonymous' for the whole request.

So there is no possibility to query against the database in the provider. (I have to import some data and have to ensure, that there are accounts for my single sign on, where should I do it?)

Is it possible to 'null' the roles in the security context after authentication?

       /**
     * Invokes the security interception
     *
     * @return boolean TRUE if the security checks was passed
     * @throws \TYPO3\Flow\Security\Exception\AccessDeniedException
     * @throws \TYPO3\Flow\Security\Exception\AuthenticationRequiredException if an entity could not be found (assuming it is bound to the current session), causing a redirect to the authentication entrypoint
     * @throws \TYPO3\Flow\Security\Exception\NoTokensAuthenticatedException if no tokens could be found and the accessDecisionManager denied access to the resource, causing a redirect to the authentication entrypoint
     */
    public function invoke() {
        try {
            $this->authenticationManager->authenticate();
                        // NULL IT
                        $this->authenticationManager->getSecurityContext()->setRoles(NULL);
                        // OR EXTRACT THE INITIALIZATION OF THE ROLES
                        $this->authenticationManager->getSecurityContext()->initRoles();

        } catch (\Doctrine\ORM\EntityNotFoundException $exception) {
            throw new \TYPO3\Flow\Security\Exception\AuthenticationRequiredException('Could not authenticate. Looks like a broken session.', 1358971444, $exception);
        } catch (\TYPO3\Flow\Security\Exception\NoTokensAuthenticatedException $noTokensAuthenticatedException) {
            // We still need to check if the resource is available to "Everybody".
            try {
                $this->accessDecisionManager->decideOnJoinPoint($this->joinPoint);
                return;
            } catch (\TYPO3\Flow\Security\Exception\AccessDeniedException $accessDeniedException) {
                throw $noTokensAuthenticatedException;
            }
        }
        $this->accessDecisionManager->decideOnJoinPoint($this->joinPoint);
    }

Thanks