Comment 2 for bug 1618966

I'm not asking for 100% coverage. I'd like to ensure we have tests that check specifically for the issue noted in bug 1613688. In addition, I would like to ensure we have tests that cover similar scenarios -- we need to be assured limited roles don't have a way of performing admin functions. A least a basic exercising of the security granted should be tested. In looking at the current coverage I'm not convinced we are thorough enough. For example, I don't see any negative tests asserting limited users cannot perform admin roles.