  def test_create_valid
    AuthSourceLdap.any_instance.stubs(:valid?).returns(true)
    post :create, {:auth_source_ldap => {:name => AuthSourceLdap.unscoped.first.name}}, set_session_user
    assert_redirected_to auth_source_ldaps_url
  end
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.