=== RUN TestReproWildcardBypassOverGRPCBoundary repro_grpc_boundary_test.go:57: SETUP: mapper.Get("widget.ext.grafana.app","widgets","") found=false (false means folder-scoped CRD mapper miss) repro_grpc_boundary_test.go:102: SERVER: Grafana AuthzService gRPC endpoint listening on 127.0.0.1:43345 repro_grpc_boundary_test.go:115: HEALTHCHECK: TCP connection to Grafana AuthzService endpoint 127.0.0.1:43345 succeeded repro_grpc_boundary_test.go:132: CLIENT: sending LIST over gRPC /authz.v1.AuthzService/List namespace=org-12 subject=user:test-uid group=widget.ext.grafana.app resource=widgets verb=list permission=widget.ext.grafana.app/widgets:get scope=* no_folder_permission=true repro_grpc_boundary_test.go:80: SERVER: accepted gRPC method=/authz.v1.AuthzService/List namespace=org-12 subject=user:test-uid group=widget.ext.grafana.app resource=widgets verb=list token_prefix=pruva repro_grpc_boundary_test.go:91: SERVER: completed gRPC method=/authz.v1.AuthzService/List response All=true Folders=[] Items=[] err= repro_grpc_boundary_test.go:135: CLIENT: received ListResponse: All=true Folders=[] Items=[] --- PASS: TestReproWildcardBypassOverGRPCBoundary (0.00s) PASS ok github.com/grafana/grafana/pkg/services/authz/rbac 0.050s