Solution:
Login is not about authorization, but authentication. You should use a plugin like adminimize (https://wordpress.org/plugins/adminimize/) and restrict functionalities by role.
