What security checking does sp_change_users_login do?

All it does is map a database user with a login. BOL says nothing about any security checking.