      it "should choose :rest when a server is specified" do
        @request.stubs(:protocol).returns "puppet"
        @request.expects(:server).returns "foo"
        @object.select(@request).should == :rest
      end
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.