You're not going to be able to get around the permissions by using the Web Services; they always respect the permissions settings. In other words, the user is always themself, and there is no elevating permissions client-side.
As Dan suggests, you'll need to rethink yout permission settings.
M.