type sarAuthorizer … func (sarAuthorizer) Authorize(ctx context.Context, a authorizer.Attributes) (authorizer.Decision, string, error) { … } func alwaysAlice(req *http.Request) (*authenticator.Response, bool, error) { … } func TestSubjectAccessReview(t *testing.T) { … } func TestSelfSubjectAccessReview(t *testing.T) { … } func TestLocalSubjectAccessReview(t *testing.T) { … }