  SameDocumentCommitObserver(WebContents* web_contents)
      : WebContentsObserver(web_contents),
        message_loop_runner_(new MessageLoopRunner) {
    EXPECT_TRUE(web_contents);
  }

The product does not perform or incorrectly performs an authorization check when an actor attempts to access a resource or perform an action.