authz.* diagnostics
Owner: the authz spec (defs/authz.ts). The status is the code's own; the exit comes from its category (CATEGORIES). A warning or info code never sets the status or the exit.
| Code |
Category |
Severity |
Status |
Exit |
Retry |
Fix |
Args |
authz.approve_needs_owner |
policy |
error |
403 |
4 |
no |
— |
role |
authz.approve_needs_person |
policy |
error |
403 |
4 |
no |
— |
— |
authz.break_glass_access_change |
policy |
error |
403 |
4 |
no |
— |
— |
authz.catalog_names_member |
policy |
error |
403 |
4 |
no |
— |
— |
authz.catalog_needs_full_read |
policy |
error |
403 |
4 |
no |
— |
type |
authz.declarer_lost_standing |
state |
error |
409 |
5 |
no |
— |
trigger, declarer |
authz.denied |
policy |
error |
403 |
4 |
no |
— |
op, on |
authz.grant_exceeds_holder |
policy |
error |
403 |
4 |
no |
— |
atom, missing, props? |
authz.member_op_subject |
reference |
error |
400 |
2 |
no |
— |
rule, op, subject |
authz.org_mismatch_defect |
platform |
error |
500 |
1 |
no |
— |
— |
authz.platform_permit |
reference |
error |
400 |
2 |
no |
— |
rule, target |
authz.platform_relation |
reference |
error |
400 |
2 |
no |
— |
rule, target |
authz.rewind_needs_owner |
policy |
error |
403 |
4 |
no |
— |
role |
authz.row_rule_cost |
schema |
error |
400 |
2 |
no |
— |
rule, cost, why |
authz.rule_needs_types |
schema |
error |
400 |
2 |
no |
— |
rule, field |
authz.view_as_read_only |
policy |
error |
403 |
4 |
no |
— |
— |