All finders, policies and controllers that needed to be modified to include an
`auditor` check are tested here