The software allocates a reusable resource or group of
					resources on behalf of an actor without imposing any restrictions on how many
					resources can be allocated, in violation of the intended security policy for
					that actor.