    def test_manage_pools(self) -> None:
        user1 = uuid4()
        user2 = uuid4()

        # by default, any can modify
        self.assertIsNone(
            check_can_manage_pools_impl(
                InstanceConfig(allow_pool_management=True), UserInfo()
            )
        )

        # with oid, but no admin
        self.assertIsNone(
            check_can_manage_pools_impl(
                InstanceConfig(allow_pool_management=True), UserInfo(object_id=user1)
            )
        )

        # is admin
        self.assertIsNone(
            check_can_manage_pools_impl(
                InstanceConfig(allow_pool_management=False, admins=[user1]),
                UserInfo(object_id=user1),
            )
        )

        # no user oid set
        self.assertIsNotNone(
            check_can_manage_pools_impl(
                InstanceConfig(allow_pool_management=False, admins=[user1]), UserInfo()
            )
        )

        # not an admin
        self.assertIsNotNone(
            check_can_manage_pools_impl(
                InstanceConfig(allow_pool_management=False, admins=[user1]),
                UserInfo(object_id=user2),
            )
        )
The software does not perform or incorrectly performs an authorization check when an actor attempts to access a resource or perform an action.