Commit de6877b
committed
Add warning logging to 5 silent catch blocks in SubjectContext
Replace empty catch blocks in security-critical authorization code
with LOG.warn calls that include exception context and stack traces:
- isTeamAsset(): log team asset ownership lookup failures
- isInTeam(): log team hierarchy traversal failures
- getRolesForTeams(): log role resolution failures
- hasRole(): log role check failures via team chain
- UserPolicyIterator: log resource owner policy load failures
No behavioral changes - fail-closed pattern preserved. Logging
enables diagnosis of intermittent auth failures caused by transient
DB errors or data inconsistencies.1 parent 9da7bea commit de6877b
1 file changed
Lines changed: 25 additions & 5 deletions
File tree
- openmetadata-service/src/main/java/org/openmetadata/service/security/policyevaluator
Lines changed: 25 additions & 5 deletions
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
169 | 169 | | |
170 | 170 | | |
171 | 171 | | |
172 | | - | |
| 172 | + | |
| 173 | + | |
| 174 | + | |
| 175 | + | |
| 176 | + | |
| 177 | + | |
173 | 178 | | |
174 | 179 | | |
175 | 180 | | |
| |||
199 | 204 | | |
200 | 205 | | |
201 | 206 | | |
202 | | - | |
| 207 | + | |
| 208 | + | |
| 209 | + | |
| 210 | + | |
| 211 | + | |
| 212 | + | |
203 | 213 | | |
204 | 214 | | |
205 | 215 | | |
| |||
226 | 236 | | |
227 | 237 | | |
228 | 238 | | |
229 | | - | |
| 239 | + | |
| 240 | + | |
230 | 241 | | |
231 | 242 | | |
232 | 243 | | |
| |||
298 | 309 | | |
299 | 310 | | |
300 | 311 | | |
301 | | - | |
| 312 | + | |
| 313 | + | |
| 314 | + | |
| 315 | + | |
| 316 | + | |
| 317 | + | |
302 | 318 | | |
303 | 319 | | |
304 | 320 | | |
| |||
471 | 487 | | |
472 | 488 | | |
473 | 489 | | |
474 | | - | |
| 490 | + | |
| 491 | + | |
| 492 | + | |
| 493 | + | |
| 494 | + | |
475 | 495 | | |
476 | 496 | | |
477 | 497 | | |
| |||
0 commit comments