    def test_modify_config(self) -> None:
        user1 = uuid4()
        user2 = uuid4()

        # no admins set
        self.assertTrue(can_modify_config_impl(InstanceConfig(), UserInfo()))

        # with oid, but no admin
        self.assertTrue(
            can_modify_config_impl(InstanceConfig(), UserInfo(object_id=user1))
        )

        # is admin
        self.assertTrue(
            can_modify_config_impl(
                InstanceConfig(admins=[user1]), UserInfo(object_id=user1)
            )
        )

        # no user oid set
        self.assertFalse(
            can_modify_config_impl(InstanceConfig(admins=[user1]), UserInfo())
        )

        # not an admin
        self.assertFalse(
            can_modify_config_impl(
                InstanceConfig(admins=[user1]), UserInfo(object_id=user2)
            )
        )
The software does not properly verify that the source of data or communication is valid.