  def test_destroy
    @model.hosts.clear
    @model.interfaces.clear
    @model.domains.clear
    delete :destroy, {:id => @model}, set_session_user
    assert_redirected_to subnets_url
    refute Subnet.exists?(@model.id)
  end
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.