    public function logout()
    {
        if ($this->Session->check('Auth.User')) {
            $this->__extralog("logout");
        }
        $this->Flash->info(__('Good-Bye'));
        $user = $this->User->find('first', array(
            'conditions' => array(
                'User.id' => $this->Auth->user('id')
            ),
            'recursive' => -1
        ));
        unset($user['User']['password']);
        $user['User']['action'] = 'logout';
        $this->User->save($user['User'], true, array('id'));
        $this->redirect($this->Auth->logout());
    }
The software does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.