TYPO3.Flow

If testable security is used in a functional test case, a user is still authenticated with the roles of a previous test if the current test doesn't do any new authentication. This is due to a session being kept across test boundaries.

    /**
     * @test
     */
    public function publicActionIsGrantedForAdministrator() {
        $this->authenticateRoles(array('Administrator'));
        $this->restrictedController->publicAction();
    }

    /**
     * @test
     * @expectedException \TYPO3\FLOW3\Security\Exception\AuthenticationRequiredException
     */
    public function customerActionIsDeniedForEverybody() {
        $this->restrictedController->customerAction();
    }

The second test will fail because the role "Administrator" is still active. If the second test called $this->autenticateRoles(array()); it would actually work.