    private void populateAuthCacheInAllPeers(AuthorizationContext authContext) throws Throwable {

        // send a GET request to the ExampleService factory to populate auth cache on each peer.
        // since factory is not OWNER_SELECTION service, request goes to the specified node.
        for (VerificationHost peer : this.host.getInProcessHostMap().values()) {
            peer.setAuthorizationContext(authContext);

            // based on the role created in test, all users have access to ExampleService
            this.host.sendAndWaitExpectSuccess(
                    Operation.createGet(UriUtils.buildStatsUri(peer, ExampleService.FACTORY_LINK)));
        }

        this.host.waitFor("Timeout waiting for correct auth cache state",
                () -> checkCacheInAllPeers(authContext.getToken(), true));
    }
The product specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors.