    def test_verified_user_has_no_change_user_perm(self, verified_user):
        """Sanity check."""
        assert not verified_user.has_perm("user.change_user")
The software performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check. This allows attackers to bypass intended access restrictions.