  def authorized?(request)
    terminus = get_terminus(request)
    if terminus.respond_to?(:authorized?)
      terminus.authorized?(request)
    else
      true
    end
  end
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.