    public function testEmptyPasswordsAreNotValid($password)
    {
        $constraint = new UserPassword(array(
            'message' => 'myMessage',
        ));

        $this->validator->validate($password, $constraint);

        $this->buildViolation('myMessage')
            ->assertRaised();
    }
The software does not restrict or incorrectly restricts access to a resource from an unauthorized actor.