  def test_clone
    get :clone, {:id => hostgroups(:common)}, set_session_user
    assert_template 'new'
  end
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.