SpiceDB checks involving relations with caveats can result in no permission when permission is expected
ImpactOn schemas involving arrows with caveats on the arrow’ed relation, when the path to resolve a CheckPermission request involves the evaluation of multiple caveated branches, requests may return a negative response when a positive response is expected.For example, given this schema:and these relationships:Permission for `'document:budget#read@user:maria with {"actual" : "admin"}'` is returned as NO_PERMISSION when HAS_PERMISSION is the correct answer.PatchesUpgrade to v1.44.2.WorkaroundsDo not use caveats in your schema over an arrow’ed relation.