You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Add warning logging to 5 silent catch blocks in SubjectContext
Replace empty catch blocks in security-critical authorization code
with LOG.warn calls that include exception context and stack traces:
- isTeamAsset(): log team asset ownership lookup failures
- isInTeam(): log team hierarchy traversal failures
- getRolesForTeams(): log role resolution failures
- hasRole(): log role check failures via team chain
- UserPolicyIterator: log resource owner policy load failures
No behavioral changes - fail-closed pattern preserved. Logging
enables diagnosis of intermittent auth failures caused by transient
DB errors or data inconsistencies.
0 commit comments