I have a multi-user web application that allows users to log in and use the
features.

As admin I need to have full access to these accounts and all data
contained.  It's not enough that I'm able to browse and delete accounts.

My question is, to do this, for every feature on the system, would seem to
be an inefficient way to go about it.  So what I'm thinking are two
possibilities:

1) Have admin as super user, so that when he browses a user's page, he has
full permission.  However this seems high risk?

2) When admin clicks on a user's page from his admin control panel, the
system changes the admin to that user, just as though the user logged in to
his own page.  This would seem a little better since I wouldn't have to code
in an extra admin check step on every user page, and also be a little more
secure since it's just the user logging in as himself.  However, the problem
here becomes, the user password is encrypted in the database.  How would I
go about passing this info to the admin for him to log in?  I do believe it
can be decrypted though, but I'm not sure (I didn't write the application).

Any suggestions on how to go about this?