Testing for Bypassing Authorization Schema