Testing a negative is much more difficult. Testing the positive is “can this user access this private data using this procedure”. Testing the negative is “can a

Testing a negative is much more difficult. Testing the positive is “can this user access this private data using this procedure”. Testing the negative is “can any use access any private data using any procedure”. That’s almost impossible to verify.