  def test_update_valid
    put :update, {:id => Hostgroup.first, :hostgroup => { :name => Hostgroup.first.name }}, set_session_user
    assert_redirected_to hostgroups_url
  end
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.