Are you sure you are performing proper authorization checks everyplace? What does Authorization even mean? James Jardine talks about Authorization and how QA, Dev and others can reinforce its implementation.