Comment 35 for bug 560246

I see. What would be the test requirements to show that level of protection does not change? Do you have testcases or do you follow an auditing standart?

I could try and produce those tests.