=== RUN   TestIntegrationServiceAccountHTTPScopedListBypass
    testinfra.go:76: Using test database type sqlite3 host  port  user  name  path /home/vscode/.cache/grafana-test/grafana-test-4135989987.db
    testinfra.go:76: Grafana is listening on 127.0.0.1:36869
    serviceaccount_http_bypass_integration_test.go:57: HTTP_SURFACE method=GET path=/apis/iam.grafana.app/v0alpha1/namespaces/default/serviceaccounts
    serviceaccount_http_bypass_integration_test.go:58: LOW_PRIV_USER login=scoped-sa-reader basic_role=Viewer grant=serviceaccounts:read scoped_to_alpha_only
    serviceaccount_http_bypass_integration_test.go:109: HTTP_LIST_RESULT_JSON {"items":2,"names":["alpha-sa","beta-sa"],"path":"/apis/iam.grafana.app/v0alpha1/namespaces/default/serviceaccounts","status":200}
    serviceaccount_http_bypass_integration_test.go:110: HTTP_RESPONSE_BODY_PREFIX {"kind":"ServiceAccountList","apiVersion":"iam.grafana.app/v0alpha1","metadata":{"resourceVersion":"1783188569567018"},"items":[{"kind":"ServiceAccount","apiVersion":"iam.grafana.app/v0alpha1","metadata":{"name":"alpha-sa","namespace":"default","uid":"b963fa6d-e36c-44f3-91e6-e3528a14423f","resourceVersion":"1783188569541992","generation":1,"creationTimestamp":"2026-07-04T18:09:29Z","labels":{"grafana.app/deprecatedInternalID":"1813431847460864"},"annotations":{"grafana.app/createdBy":"user:ffr47
    serviceaccount_http_bypass_integration_test.go:115: BEHAVIOUR: VULNERABLE_HTTP - scoped low-priv user received unauthorized beta-sa over original HTTP serviceaccounts list endpoint
--- PASS: TestIntegrationServiceAccountHTTPScopedListBypass (22.88s)
PASS