@derekpierre derekpierre 4 days ago Member
Do we want to differentiate the reason for these raised Policy.Unauthorized exceptions (L1830, L1835, L1839) by contextualizing with a string message? Or is it unsafe to leak the reason?

 
@KPrasch KPrasch 3 days ago Member
You're sensing my thoughts there. Do you think there's an added advantage to provide a bob with the reason why he's been denied access over obscurity?

 
@derekpierre derekpierre 3 days ago • 
 Member
Feels like it - the one raised from the VerificationError (L1835) may be interesting to know ...

 
@derekpierre derekpierre yesterday Member
Alternatively, we could do sub-classes of Policy.Unauthorized if differentiation is worth it.