code: func buildAttributes(info user.Info, namespace, policyName, apiGroupName string) authorizer.Attributes {
  	// check against the namespace that the pod is being created in to allow per-namespace PSP grants.
  	attr := authorizer.AttributesRecord{
  		User:            info,
  		Verb:            "use",
  		Namespace:       namespace,
  		Name:            policyName,
  		APIGroup:        apiGroupName,
  		Resource:        "podsecuritypolicies",
  		ResourceRequest: true,
  	}
  	return attr
  }
docs: // buildAttributes builds an attributes record for a SAR based on the user info and policy.