    public function remove()
    {
        $this->checkCSRFParam();
        $project = $this->getProject();
        $action = $this->getAction($project);

        if (! empty($action) && $this->actionModel->remove($action['id'])) {
            $this->flash->success(t('Action removed successfully.'));
        } else {
            $this->flash->failure(t('Unable to remove this action.'));
        }

        $this->response->redirect($this->helper->url->to('ActionController', 'index', array('project_id' => $project['id'])));
    }
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.