    it "should return :file if the URI protocol is set to 'file'" do
      @request.expects(:protocol).returns "file"
      @object.select(@request).should == :file
    end
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.