  removeCustomField: function removeCustomField({ _id }) {
    check(_id, String)
    checkAuthentication(this)
    if (!CustomFields.findOne({ _id })) {
      throw new Meteor.Error('error-custom-field-not-found', 'Custom field not found', { method: 'removeCustomField' })
    }
    CustomFields.remove({ _id })
  },
The software does not perform or incorrectly performs an authorization check when an actor attempts to access a resource or perform an action.