        foreach ($elem[2] as $field) {
            echo '
                    <tr class="tr_cf tr_fields hidden" id="cf_tr_'.$field[0].'">
                        <td valign="top" class="td_title">&nbsp;&nbsp;<i class="fa fa-caret-right"></i>&nbsp;<i>'.$field[1].'</i> :</td>
                        <td>';
            if ($field[3] === "masked") {
                echo '
                            <div id="id_field_'.htmlspecialchars($field[0]).'_'.$elem[0].'" style="float:left; cursor:pointer; width:300px;" class="fields_div unhide_masked_data pointer"></div><input type="hidden" id="hid_field_'.htmlspecialchars($field[0]).'_'.$elem[0].'" class="fields" />';
            } else {
                echo '
                            <div id="id_field_'.htmlspecialchars($field[0]).'_'.$elem[0].'" style="display:inline;" class="fields_div"></div><input type="hidden" id="hid_field_'.htmlspecialchars($field[0]).'_'.$elem[0].'" class="fields" />';
            }
            echo '
                        </td>
                    </tr>';
        }
The software does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.