We need both the original user's staff status as well as the staff status of the user being masqueraded as.