Affected by GO-2025-3744
and 5 other vulnerabilities
GO-2025-3744: SpiceDB checks involving relations with caveats can result in no permission when permission is expected in github.com/authzed/spicedb
GO-2025-4120: SpiceDB WriteRelationships fails silently if payload is too big in github.com/authzed/spicedb
GO-2025-4151: SpiceDB: LookupResources with Multiple Entrypoints across Different Definitions Can Return Incomplete Results in github.com/authzed/spicedb
GO-2026-4465: LookupResources Cursor section tampering can crash SpiceDB process via tuple.MustParse panic in github.com/authzed/spicedb
GO-2026-5133: SpiceDB: Checks involving relations with caveats can result in unconditional permission when conditional permission is expected in github.com/authzed/spicedb
GO-2026-5514: SpiceDB: Caveat structures with nested lists can result in improper cache reuse in github.com/authzed/spicedb
NewMemDBDatastoreForTesting creates a new in-memory datastore for testing.
This is a convenience function that wraps the creation of a new MemDB datastore,
and injects additional proxies for validation at test time.
NOTE: These additional proxies are not performant for use in production (but then,
neither is memdb)