    it 'should not update roles' do
      expect { spree_put :update, { :user => { :spree_role_ids => [role.id] } }}.to raise_exception(ActiveModel::MassAssignmentSecurity::Error)
    end
Weaknesses in this category are related to the management of permissions, privileges, and other security features that are used to perform access control.