Talk about timing. I decided to hit up a few old Ask a Jedi questions and came across this:
I'm working with the CFMX 7 Admin API. When trying to invoke the 'getJvmProperty()' method, I receive an error stating 'Current user is not authorized to invoke this method.' I am instantiating the admin.cfc and the runtime.cfc in the request scope. I am also using the request.adminObj.login() method to login to the Administrator. When I invoke the inherited method 'isAdminUser()' from the runtime object, the response is TRUE. I am slightly confused here.
Today Macromedia (um, sorry, Adobe) released a tech note that I believe answers this exact question: