  def test_nest
    get :nest, {:id => hostgroups(:common).id}, set_session_user
    assert_template 'new'
  end
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.