}
parts = []string{match[a.matchNamespaceIndex], match[a.matchRoleIndex]}
parts = strings.SplitN(p, ":", 2)
if len(parts) != 2 {
a.logger.Warn(fmt.Sprintf("ignoring permission in unexpected format: %v", permission))
continue