Pricing rules for customer groups

Hello again,

Is it only me, who faced this problem? I am in desperate need of any comments on this problem.

Well, what I have understood for now, the API function quote.create() tries to get a session, but since we are not logged in as a customer (but as an api user), Mage::getSingleton('checkout/session') returns an empty session (or whatever it considers as "not logged in" state). What I have done for now, is adding

	$customerSession = Mage::getSingleton('customer/session');
	$customerSession->setCustomerAsLoggedIn($customer);

before Mage::getSingleton('checkout/session'). At least, this leads to applying correct pricing rules, including the customer-specific ones.

This is the only way I've found to make it work. However, it feels that this approach is a potential security hole.

I have to mention, that I am new to Magento, so I may be missing something.

Please, help.