  def test_update_invalid
    Subnet.any_instance.stubs(:valid?).returns(false)
    subnet_id = @model
    put :update, {:id => subnet_id, :subnet => {:network => nil}}, set_session_user
    assert_template 'edit'
  end
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.