From 3bb27fe8f1f19c1e851790a76f1911d3098ac115 Mon Sep 17 00:00:00 2001
From: Bryan Frimin <bryan@getprobo.com>
Date: Fri, 20 Mar 2026 18:16:32 +0100
Subject: [PATCH] Style

Signed-off-by: Bryan Frimin <bryan@getprobo.com>
---
 pkg/iam/authorizer.go   | 12 +++++++++---
 pkg/iam/iam_policies.go |  8 ++++++--
 pkg/iam/service.go      |  5 ++++-
 3 files changed, 19 insertions(+), 6 deletions(-)

diff --git a/pkg/iam/authorizer.go b/pkg/iam/authorizer.go
index 8fb9a9115..171b54db3 100644
--- a/pkg/iam/authorizer.go
+++ b/pkg/iam/authorizer.go
@@ -303,7 +303,9 @@ func (a *Authorizer) recordAuditLog(
 
 	orgID, err := gid.ParseGID(orgIDStr)
 	if err != nil {
-		a.logger.ErrorCtx(ctx, "cannot parse organization id for audit log",
+		a.logger.ErrorCtx(
+			ctx,
+			"cannot parse organization id for audit log",
 			log.Error(err),
 		)
 		return
@@ -320,7 +322,9 @@ func (a *Authorizer) recordAuditLog(
 
 	metadata, err := json.Marshal(map[string]any{})
 	if err != nil {
-		a.logger.ErrorCtx(ctx, "cannot marshal audit log metadata",
+		a.logger.ErrorCtx(
+			ctx,
+			"cannot marshal audit log metadata",
 			log.Error(err),
 		)
 		return
@@ -341,7 +345,9 @@ func (a *Authorizer) recordAuditLog(
 	scope := coredata.NewScope(orgID.TenantID())
 
 	if err := entry.Insert(ctx, conn, scope); err != nil {
-		a.logger.ErrorCtx(ctx, "cannot insert audit log entry",
+		a.logger.ErrorCtx(
+			ctx,
+			"cannot insert audit log entry",
 			log.Error(err),
 			log.String("action", params.Action),
 			log.String("resource_id", params.Resource.String()),
diff --git a/pkg/iam/iam_policies.go b/pkg/iam/iam_policies.go
index 7d198a4c5..2b007e19e 100644
--- a/pkg/iam/iam_policies.go
+++ b/pkg/iam/iam_policies.go
@@ -316,7 +316,9 @@ var IAMAdminPolicy = policy.NewPolicy(
 		ActionAuditLogEntryList,
 	).
 		WithSID("audit-log-entry-admin-access").
-		When(policy.Equals("principal.organization_id", "resource.organization_id")),
+		When(
+			policy.Equals("principal.organization_id", "resource.organization_id"),
+		),
 ).
 	WithDescription("IAM admin access - can manage members but cannot delete organization or manage SAML/SCIM")
 
@@ -358,6 +360,8 @@ var IAMViewerPolicy = policy.NewPolicy(
 		ActionAuditLogEntryList,
 	).
 		WithSID("audit-log-entry-viewer-access").
-		When(policy.Equals("principal.organization_id", "resource.organization_id")),
+		When(
+			policy.Equals("principal.organization_id", "resource.organization_id"),
+		),
 ).
 	WithDescription("Read-only IAM access for organization viewers")
diff --git a/pkg/iam/service.go b/pkg/iam/service.go
index 0b78366bd..3a91d9adc 100644
--- a/pkg/iam/service.go
+++ b/pkg/iam/service.go
@@ -123,7 +123,10 @@ func NewService(
 	svc.AuthService = NewAuthService(svc)
 	svc.APIKeyService = NewAPIKeyService(svc)
 
-	svc.Authorizer = NewAuthorizer(pgClient, cfg.Logger.Named("authorizer"))
+	svc.Authorizer = NewAuthorizer(
+		pgClient,
+		cfg.Logger.Named("authorizer"),
+	)
 	svc.Authorizer.RegisterPolicySet(IAMPolicySet())
 
 	samlService, err := saml.NewService(svc.pg, svc.baseURL, svc.certificate, svc.privateKey, cfg.Logger)