The NoAccess hook should return an error when a user does not use Com…

…mon Fate (#700)
common-fate · Jul 17, 2024 · 928c328 · 928c328
1 parent 79cd39e
commit 928c328
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/pkg/hook/accessrequesthook/accessrequesthook.go b/pkg/hook/accessrequesthook/accessrequesthook.go
@@ -41,7 +41,8 @@ type NoAccessInput struct {
 func (h Hook) NoAccess(ctx context.Context, input NoAccessInput) (retry bool, err error) {
 	cfg, err := cfcfg.Load(ctx, input.Profile)
 	if err != nil {
-		return false, err
+		clio.Debugw("failed to load cfconfig, skipping check for active grants in a common fate deployment", "error", err)
+		return false, nil
 	}
 
 	target := eid.New("AWS::Account", input.Profile.AWSConfig.SSOAccountID)