    def show
      respond_to do |format|
        format.html
        format.json { render json: @application }
      end
    end
The software does not perform an authorization check when an actor attempts to access a resource or perform an action.