static void ifbw_add(IFBW *ptr) {
	assert(ptr);

	if (ifbw != NULL)
		ptr->next = ifbw;
	ifbw = ptr;
}

The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.