assertEquals("1user_123", permissionHelper.encode("{user}user_123"));
        assertEquals("2group$special", permissionHelper.encode("{group}group$special"));
    }

    @Test
    public void test_decode_withComplexValues() {
        assertEquals("{user}******@****.***", permissionHelper.decode("******@****.***"));
        assertEquals("{group}group/subgroup", permissionHelper.decode("2group/subgroup"));