Style

Signed-off-by: Bryan Frimin <bryan@probo.com>

pkg/coredata/access_entry.go

@@ -89,10 +89,11 @@ func (e *AccessEntry) AuthorizationAttributes(
 	defer rows.Close()
 
 	attrsByID := make(policy.AttributesByID)
+
 	for rows.Next() {
 		var id, organizationID gid.GID
-		err := rows.Scan(&id, &organizationID)
+
-		if err != nil {
+		if err := rows.Scan(&id, &organizationID); err != nil {
 			return nil, fmt.Errorf("cannot scan authorization attributes: %w", err)
 		}
 

pkg/coredata/access_entry_decision_history.go

@@ -108,10 +108,11 @@ func (h *AccessEntryDecisionHistory) AuthorizationAttributes(
 	defer rows.Close()
 
 	attrsByID := make(policy.AttributesByID)
+
 	for rows.Next() {
 		var id, organizationID gid.GID
-		err := rows.Scan(&id, &organizationID)
+
-		if err != nil {
+		if err := rows.Scan(&id, &organizationID); err != nil {
 			return nil, fmt.Errorf("cannot scan authorization attributes: %w", err)
 		}
 

pkg/coredata/access_review_campaign.go

@@ -73,10 +73,11 @@ func (c *AccessReviewCampaign) AuthorizationAttributes(
 	defer rows.Close()
 
 	attrsByID := make(policy.AttributesByID)
+
 	for rows.Next() {
 		var id, organizationID gid.GID
-		err := rows.Scan(&id, &organizationID)
+
-		if err != nil {
+		if err := rows.Scan(&id, &organizationID); err != nil {
 			return nil, fmt.Errorf("cannot scan authorization attributes: %w", err)
 		}
 

pkg/coredata/access_source.go

@@ -72,10 +72,11 @@ func (as *AccessSource) AuthorizationAttributes(
 	defer rows.Close()
 
 	attrsByID := make(policy.AttributesByID)
+
 	for rows.Next() {
 		var id, organizationID gid.GID
-		err := rows.Scan(&id, &organizationID)
+
-		if err != nil {
+		if err := rows.Scan(&id, &organizationID); err != nil {
 			return nil, fmt.Errorf("cannot scan authorization attributes: %w", err)
 		}
 

pkg/coredata/agent_run.go

@@ -141,10 +141,11 @@ func (e *AgentRun) AuthorizationAttributes(
 	defer rows.Close()
 
 	attrsByID := make(policy.AttributesByID)
+
 	for rows.Next() {
 		var id, organizationID gid.GID
-		err := rows.Scan(&id, &organizationID)
+
-		if err != nil {
+		if err := rows.Scan(&id, &organizationID); err != nil {
 			return nil, fmt.Errorf("cannot scan authorization attributes: %w", err)
 		}
 

pkg/coredata/applicability_statement.go

@@ -77,10 +77,11 @@ func (s *ApplicabilityStatement) AuthorizationAttributes(
 	defer rows.Close()
 
 	attrsByID := make(policy.AttributesByID)
+
 	for rows.Next() {
 		var id, organizationID gid.GID
-		err := rows.Scan(&id, &organizationID)
+
-		if err != nil {
+		if err := rows.Scan(&id, &organizationID); err != nil {
 			return nil, fmt.Errorf("cannot scan authorization attributes: %w", err)
 		}
 

pkg/coredata/asset.go

@@ -75,10 +75,11 @@ func (a *Asset) AuthorizationAttributes(
 	defer rows.Close()
 
 	attrsByID := make(policy.AttributesByID)
+
 	for rows.Next() {
 		var id, organizationID gid.GID
-		err := rows.Scan(&id, &organizationID)
+
-		if err != nil {
+		if err := rows.Scan(&id, &organizationID); err != nil {
 			return nil, fmt.Errorf("cannot scan authorization attributes: %w", err)
 		}
 

pkg/coredata/audit.go

@@ -81,10 +81,11 @@ func (a *Audit) AuthorizationAttributes(
 	defer rows.Close()
 
 	attrsByID := make(policy.AttributesByID)
+
 	for rows.Next() {
 		var id, organizationID gid.GID
-		err := rows.Scan(&id, &organizationID)
+
-		if err != nil {
+		if err := rows.Scan(&id, &organizationID); err != nil {
 			return nil, fmt.Errorf("cannot scan authorization attributes: %w", err)
 		}
 

pkg/coredata/audit_log_entry.go

@@ -73,10 +73,11 @@ func (e *AuditLogEntry) AuthorizationAttributes(
 	defer rows.Close()
 
 	attrsByID := make(policy.AttributesByID)
+
 	for rows.Next() {
 		var id, organizationID gid.GID
-		err := rows.Scan(&id, &organizationID)
+
-		if err != nil {
+		if err := rows.Scan(&id, &organizationID); err != nil {
 			return nil, fmt.Errorf("cannot scan authorization attributes: %w", err)
 		}
 

pkg/coredata/compliance_external_url.go

@@ -73,10 +73,11 @@ func (c *ComplianceExternalURL) AuthorizationAttributes(
 	defer rows.Close()
 
 	attrsByID := make(policy.AttributesByID)
+
 	for rows.Next() {
 		var id, organizationID gid.GID
-		err := rows.Scan(&id, &organizationID)
+
-		if err != nil {
+		if err := rows.Scan(&id, &organizationID); err != nil {
 			return nil, fmt.Errorf("cannot scan authorization attributes: %w", err)
 		}
 

pkg/coredata/compliance_framework.go

@@ -76,10 +76,11 @@ func (c *ComplianceFramework) AuthorizationAttributes(
 	defer rows.Close()
 
 	attrsByID := make(policy.AttributesByID)
+
 	for rows.Next() {
 		var id, organizationID gid.GID
-		err := rows.Scan(&id, &organizationID)
+
-		if err != nil {
+		if err := rows.Scan(&id, &organizationID); err != nil {
 			return nil, fmt.Errorf("cannot scan authorization attributes: %w", err)
 		}
 

pkg/coredata/connector.go

@@ -105,10 +105,11 @@ func (c *Connector) AuthorizationAttributes(
 	defer rows.Close()
 
 	attrsByID := make(policy.AttributesByID)
+
 	for rows.Next() {
 		var id, organizationID gid.GID
-		err := rows.Scan(&id, &organizationID)
+
-		if err != nil {
+		if err := rows.Scan(&id, &organizationID); err != nil {
 			return nil, fmt.Errorf("cannot scan authorization attributes: %w", err)
 		}
 

pkg/coredata/control.go

@@ -78,10 +78,11 @@ func (c *Control) AuthorizationAttributes(
 	defer rows.Close()
 
 	attrsByID := make(policy.AttributesByID)
+
 	for rows.Next() {
 		var id, organizationID gid.GID
-		err := rows.Scan(&id, &organizationID)
+
-		if err != nil {
+		if err := rows.Scan(&id, &organizationID); err != nil {
 			return nil, fmt.Errorf("cannot scan authorization attributes: %w", err)
 		}
 

pkg/coredata/cookie_banner.go

@@ -77,10 +77,11 @@ func (b *CookieBanner) AuthorizationAttributes(
 	defer rows.Close()
 
 	attrsByID := make(policy.AttributesByID)
+
 	for rows.Next() {
 		var id, organizationID gid.GID
-		err := rows.Scan(&id, &organizationID)
+
-		if err != nil {
+		if err := rows.Scan(&id, &organizationID); err != nil {
 			return nil, fmt.Errorf("cannot scan authorization attributes: %w", err)
 		}
 

pkg/coredata/cookie_banner_translation.go

@@ -62,10 +62,11 @@ func (t *CookieBannerTranslation) AuthorizationAttributes(
 	defer rows.Close()
 
 	attrsByID := make(policy.AttributesByID)
+
 	for rows.Next() {
 		var id, organizationID gid.GID
-		err := rows.Scan(&id, &organizationID)
+
-		if err != nil {
+		if err := rows.Scan(&id, &organizationID); err != nil {
 			return nil, fmt.Errorf("cannot scan authorization attributes: %w", err)
 		}
 

pkg/coredata/cookie_banner_version.go

@@ -100,10 +100,11 @@ func (v *CookieBannerVersion) AuthorizationAttributes(
 	defer rows.Close()
 
 	attrsByID := make(policy.AttributesByID)
+
 	for rows.Next() {
 		var id, organizationID gid.GID
-		err := rows.Scan(&id, &organizationID)
+
-		if err != nil {
+		if err := rows.Scan(&id, &organizationID); err != nil {
 			return nil, fmt.Errorf("cannot scan authorization attributes: %w", err)
 		}
 

pkg/coredata/cookie_category.go

@@ -102,10 +102,11 @@ func (c *CookieCategory) AuthorizationAttributes(
 	defer rows.Close()
 
 	attrsByID := make(policy.AttributesByID)
+
 	for rows.Next() {
 		var id, organizationID gid.GID
-		err := rows.Scan(&id, &organizationID)
+
-		if err != nil {
+		if err := rows.Scan(&id, &organizationID); err != nil {
 			return nil, fmt.Errorf("cannot scan authorization attributes: %w", err)
 		}
 

pkg/coredata/cookie_consent_record.go

@@ -78,10 +78,11 @@ func (r *CookieConsentRecord) AuthorizationAttributes(
 	defer rows.Close()
 
 	attrsByID := make(policy.AttributesByID)
+
 	for rows.Next() {
 		var id, organizationID gid.GID
-		err := rows.Scan(&id, &organizationID)
+
-		if err != nil {
+		if err := rows.Scan(&id, &organizationID); err != nil {
 			return nil, fmt.Errorf("cannot scan authorization attributes: %w", err)
 		}
 

pkg/coredata/custom_domain.go

@@ -88,10 +88,11 @@ func (cd *CustomDomain) AuthorizationAttributes(
 	defer rows.Close()
 
 	attrsByID := make(policy.AttributesByID)
+
 	for rows.Next() {
 		var id, organizationID gid.GID
-		err := rows.Scan(&id, &organizationID)
+
-		if err != nil {
+		if err := rows.Scan(&id, &organizationID); err != nil {
 			return nil, fmt.Errorf("cannot scan authorization attributes: %w", err)
 		}
 

pkg/coredata/data_protection_impact_assessment.go

@@ -183,10 +183,11 @@ func (dpia *DataProtectionImpactAssessment) AuthorizationAttributes(
 	defer rows.Close()
 
 	attrsByID := make(policy.AttributesByID)
+
 	for rows.Next() {
 		var id, organizationID gid.GID
-		err := rows.Scan(&id, &organizationID)
+
-		if err != nil {
+		if err := rows.Scan(&id, &organizationID); err != nil {
 			return nil, fmt.Errorf("cannot scan authorization attributes: %w", err)
 		}
 

pkg/coredata/datum.go

@@ -75,10 +75,11 @@ func (d *Datum) AuthorizationAttributes(
 	defer rows.Close()
 
 	attrsByID := make(policy.AttributesByID)
+
 	for rows.Next() {
 		var id, organizationID gid.GID
-		err := rows.Scan(&id, &organizationID)
+
-		if err != nil {
+		if err := rows.Scan(&id, &organizationID); err != nil {
 			return nil, fmt.Errorf("cannot scan authorization attributes: %w", err)
 		}
 

pkg/coredata/document.go

@@ -85,10 +85,11 @@ func (d *Document) AuthorizationAttributes(
 	defer rows.Close()
 
 	attrsByID := make(policy.AttributesByID)
+
 	for rows.Next() {
 		var id, organizationID gid.GID
-		err := rows.Scan(&id, &organizationID)
+
-		if err != nil {
+		if err := rows.Scan(&id, &organizationID); err != nil {
 			return nil, fmt.Errorf("cannot scan authorization attributes: %w", err)
 		}
 

pkg/coredata/document_version.go

@@ -73,10 +73,11 @@ func (dv *DocumentVersion) AuthorizationAttributes(
 	defer rows.Close()
 
 	attrsByID := make(policy.AttributesByID)
+
 	for rows.Next() {
 		var id, organizationID gid.GID
-		err := rows.Scan(&id, &organizationID)
+
-		if err != nil {
+		if err := rows.Scan(&id, &organizationID); err != nil {
 			return nil, fmt.Errorf("cannot scan authorization attributes: %w", err)
 		}
 

pkg/coredata/document_version_approval_decision.go

@@ -74,10 +74,11 @@ func (d *DocumentVersionApprovalDecision) AuthorizationAttributes(
 	defer rows.Close()
 
 	attrsByID := make(policy.AttributesByID)
+
 	for rows.Next() {
 		var id, organizationID gid.GID
-		err := rows.Scan(&id, &organizationID)
+
-		if err != nil {
+		if err := rows.Scan(&id, &organizationID); err != nil {
 			return nil, fmt.Errorf("cannot scan authorization attributes: %w", err)
 		}
 

pkg/coredata/document_version_approval_quorum.go

@@ -70,10 +70,11 @@ func (q *DocumentVersionApprovalQuorum) AuthorizationAttributes(
 	defer rows.Close()
 
 	attrsByID := make(policy.AttributesByID)
+
 	for rows.Next() {
 		var id, organizationID gid.GID
-		err := rows.Scan(&id, &organizationID)
+
-		if err != nil {
+		if err := rows.Scan(&id, &organizationID); err != nil {
 			return nil, fmt.Errorf("cannot scan authorization attributes: %w", err)
 		}
 

pkg/coredata/document_version_signature.go

@@ -84,10 +84,11 @@ func (dvs *DocumentVersionSignature) AuthorizationAttributes(
 	defer rows.Close()
 
 	attrsByID := make(policy.AttributesByID)
+
 	for rows.Next() {
 		var id, organizationID gid.GID
-		err := rows.Scan(&id, &organizationID)
+
-		if err != nil {
+		if err := rows.Scan(&id, &organizationID); err != nil {
 			return nil, fmt.Errorf("cannot scan authorization attributes: %w", err)
 		}
 

pkg/coredata/electronic_signature.go

@@ -78,6 +78,7 @@ func (es *ElectronicSignature) AuthorizationAttributes(
 	defer rows.Close()
 
 	attrsByID := make(policy.AttributesByID)
+
 	for rows.Next() {
 		var id, organizationID gid.GID
 		if err := rows.Scan(&id, &organizationID); err != nil {

pkg/coredata/email.go

@@ -91,10 +91,11 @@ WHERE
 	defer rows.Close()
 
 	attrsByID := make(policy.AttributesByID, len(resourceIDs))
+
 	for rows.Next() {
 		var id gid.GID
-		err = rows.Scan(&id)
+
-		if err != nil {
+		if err := rows.Scan(&id); err != nil {
 			return nil, fmt.Errorf("cannot scan email authorization attributes: %w", err)
 		}
 

pkg/coredata/evidence.go

@@ -79,10 +79,11 @@ func (e *Evidence) AuthorizationAttributes(
 	defer rows.Close()
 
 	attrsByID := make(policy.AttributesByID)
+
 	for rows.Next() {
 		var id, organizationID gid.GID
-		err := rows.Scan(&id, &organizationID)
+
-		if err != nil {
+		if err := rows.Scan(&id, &organizationID); err != nil {
 			return nil, fmt.Errorf("cannot scan authorization attributes: %w", err)
 		}
 

pkg/coredata/export_job.go

@@ -83,10 +83,11 @@ func (ej *ExportJob) AuthorizationAttributes(
 	defer rows.Close()
 
 	attrsByID := make(policy.AttributesByID)
+
 	for rows.Next() {
 		var id, organizationID gid.GID
-		err := rows.Scan(&id, &organizationID)
+
-		if err != nil {
+		if err := rows.Scan(&id, &organizationID); err != nil {
 			return nil, fmt.Errorf("cannot scan authorization attributes: %w", err)
 		}
 

pkg/coredata/file.go

@@ -85,10 +85,11 @@ func (f *File) AuthorizationAttributes(
 	defer rows.Close()
 
 	attrsByID := make(policy.AttributesByID)
+
 	for rows.Next() {
 		var id, organizationID gid.GID
-		err := rows.Scan(&id, &organizationID)
+
-		if err != nil {
+		if err := rows.Scan(&id, &organizationID); err != nil {
 			return nil, fmt.Errorf("cannot scan authorization attributes: %w", err)
 		}
 

pkg/coredata/finding.go

@@ -92,10 +92,11 @@ func (f *Finding) AuthorizationAttributes(
 	defer rows.Close()
 
 	attrsByID := make(policy.AttributesByID)
+
 	for rows.Next() {
 		var id, organizationID gid.GID
-		err := rows.Scan(&id, &organizationID)
+
-		if err != nil {
+		if err := rows.Scan(&id, &organizationID); err != nil {
 			return nil, fmt.Errorf("cannot scan authorization attributes: %w", err)
 		}
 

pkg/coredata/framework.go

@@ -80,6 +80,7 @@ WHERE
 	defer rows.Close()
 
 	attrsByID := make(policy.AttributesByID)
+
 	for rows.Next() {
 		var (
 			frameworkID    gid.GID
@@ -88,10 +89,12 @@ WHERE
 		if err := rows.Scan(&frameworkID, &organizationID); err != nil {
 			return nil, fmt.Errorf("cannot scan framework authorization attributes batch: %w", err)
 		}
+
 		attrsByID[frameworkID] = policy.Attributes{
 			"organization_id": organizationID.String(),
 		}
 	}
+
 	if err := rows.Err(); err != nil {
 		return nil, fmt.Errorf("cannot iterate framework authorization attributes batch: %w", err)
 	}

pkg/coredata/identity.go

@@ -170,6 +170,7 @@ WHERE
 	defer rows.Close()
 
 	attrsByID := make(policy.AttributesByID, len(resourceIDs))
+
 	for rows.Next() {
 		var (
 			id           gid.GID

pkg/coredata/invitation.go

@@ -170,6 +170,7 @@ WHERE
 	defer rows.Close()
 
 	attrsByID := make(policy.AttributesByID, len(resourceIDs))
+
 	for rows.Next() {
 		var (
 			id             gid.GID

pkg/coredata/mailing_list.go

@@ -55,10 +55,11 @@ func (ml *MailingList) AuthorizationAttributes(
 	defer rows.Close()
 
 	attrsByID := make(policy.AttributesByID)
+
 	for rows.Next() {
 		var id, organizationID gid.GID
-		err := rows.Scan(&id, &organizationID)
+
-		if err != nil {
+		if err := rows.Scan(&id, &organizationID); err != nil {
 			return nil, fmt.Errorf("cannot scan authorization attributes: %w", err)
 		}
 

pkg/coredata/mailing_list_subscriber.go

@@ -64,10 +64,11 @@ func (cns *MailingListSubscriber) AuthorizationAttributes(
 	defer rows.Close()
 
 	attrsByID := make(policy.AttributesByID)
+
 	for rows.Next() {
 		var id, organizationID gid.GID
-		err := rows.Scan(&id, &organizationID)
+
-		if err != nil {
+		if err := rows.Scan(&id, &organizationID); err != nil {
 			return nil, fmt.Errorf("cannot scan authorization attributes: %w", err)
 		}
 

pkg/coredata/mailing_list_update.go

@@ -73,10 +73,11 @@ func (mlu *MailingListUpdate) AuthorizationAttributes(
 	defer rows.Close()
 
 	attrsByID := make(policy.AttributesByID)
+
 	for rows.Next() {
 		var id, organizationID gid.GID
-		err := rows.Scan(&id, &organizationID)
+
-		if err != nil {
+		if err := rows.Scan(&id, &organizationID); err != nil {
 			return nil, fmt.Errorf("cannot scan authorization attributes: %w", err)
 		}
 

pkg/coredata/measure.go

@@ -76,10 +76,11 @@ func (m *Measure) AuthorizationAttributes(
 	defer rows.Close()
 
 	attrsByID := make(policy.AttributesByID)
+
 	for rows.Next() {
 		var id, organizationID gid.GID
-		err := rows.Scan(&id, &organizationID)
+
-		if err != nil {
+		if err := rows.Scan(&id, &organizationID); err != nil {
 			return nil, fmt.Errorf("cannot scan authorization attributes: %w", err)
 		}
 

pkg/coredata/membership.go

@@ -228,6 +228,7 @@ WHERE
 	defer rows.Close()
 
 	attrsByID := make(policy.AttributesByID, len(resourceIDs))
+
 	for rows.Next() {
 		var (
 			id             gid.GID

pkg/coredata/membership_profile.go

@@ -115,6 +115,7 @@ WHERE
 	defer rows.Close()
 
 	attrsByID := make(policy.AttributesByID, len(resourceIDs))
+
 	for rows.Next() {
 		var (
 			id             gid.GID

pkg/coredata/oauth2_client.go

@@ -99,6 +99,7 @@ WHERE
 	defer rows.Close()
 
 	attrsByID := make(policy.AttributesByID, len(resourceIDs))
+
 	for rows.Next() {
 		var (
 			id             gid.GID
@@ -114,6 +115,7 @@ WHERE
 		if organizationID != nil {
 			attrs["organization_id"] = organizationID.String()
 		}
+
 		attrsByID[id] = attrs
 	}
 

pkg/coredata/oauth2_consent.go

@@ -86,6 +86,7 @@ WHERE
 	defer rows.Close()
 
 	attrsByID := make(policy.AttributesByID, len(resourceIDs))
+
 	for rows.Next() {
 		var (
 			id         gid.GID

pkg/coredata/obligation.go

@@ -83,10 +83,11 @@ func (o *Obligation) AuthorizationAttributes(
 	defer rows.Close()
 
 	attrsByID := make(policy.AttributesByID)
+
 	for rows.Next() {
 		var id, organizationID gid.GID
-		err := rows.Scan(&id, &organizationID)
+
-		if err != nil {
+		if err := rows.Scan(&id, &organizationID); err != nil {
 			return nil, fmt.Errorf("cannot scan authorization attributes: %w", err)
 		}
 

pkg/coredata/organization.go

@@ -66,6 +66,7 @@ func (o *Organization) AuthorizationAttributes(
 	defer rows.Close()
 
 	attrsByID := make(policy.AttributesByID)
+
 	for rows.Next() {
 		var id gid.GID
 		if err := rows.Scan(&id); err != nil {

pkg/coredata/personal_api_key.go

@@ -120,6 +120,7 @@ WHERE
 	defer rows.Close()
 
 	attrsByID := make(policy.AttributesByID, len(resourceIDs))
+
 	for rows.Next() {
 		var (
 			id         gid.GID

pkg/coredata/processing_activities.go

@@ -196,10 +196,11 @@ func (p *ProcessingActivity) AuthorizationAttributes(
 	defer rows.Close()
 
 	attrsByID := make(policy.AttributesByID)
+
 	for rows.Next() {
 		var id, organizationID gid.GID
-		err := rows.Scan(&id, &organizationID)
+
-		if err != nil {
+		if err := rows.Scan(&id, &organizationID); err != nil {
 			return nil, fmt.Errorf("cannot scan authorization attributes: %w", err)
 		}
 

pkg/coredata/report.go

@@ -62,10 +62,11 @@ func (r *Report) AuthorizationAttributes(
 	defer rows.Close()
 
 	attrsByID := make(policy.AttributesByID)
+
 	for rows.Next() {
 		var id, organizationID gid.GID
-		err := rows.Scan(&id, &organizationID)
+
-		if err != nil {
+		if err := rows.Scan(&id, &organizationID); err != nil {
 			return nil, fmt.Errorf("cannot scan authorization attributes: %w", err)
 		}
 

pkg/coredata/rights_requests.go

@@ -81,10 +81,11 @@ func (rr *RightsRequest) AuthorizationAttributes(
 	defer rows.Close()
 
 	attrsByID := make(policy.AttributesByID)
+
 	for rows.Next() {
 		var id, organizationID gid.GID
-		err := rows.Scan(&id, &organizationID)
+
-		if err != nil {
+		if err := rows.Scan(&id, &organizationID); err != nil {
 			return nil, fmt.Errorf("cannot scan authorization attributes: %w", err)
 		}
 

pkg/coredata/risk.go

@@ -202,10 +202,11 @@ func (r *Risk) AuthorizationAttributes(
 	defer rows.Close()
 
 	attrsByID := make(policy.AttributesByID)
+
 	for rows.Next() {
 		var id, organizationID gid.GID
-		err := rows.Scan(&id, &organizationID)
+
-		if err != nil {
+		if err := rows.Scan(&id, &organizationID); err != nil {
 			return nil, fmt.Errorf("cannot scan authorization attributes: %w", err)
 		}
 

pkg/coredata/risk_assessment.go

@@ -71,10 +71,11 @@ func (ra *RiskAssessment) AuthorizationAttributes(
 	defer rows.Close()
 
 	attrsByID := make(policy.AttributesByID)
+
 	for rows.Next() {
 		var id, organizationID gid.GID
-		err := rows.Scan(&id, &organizationID)
+
-		if err != nil {
+		if err := rows.Scan(&id, &organizationID); err != nil {
 			return nil, fmt.Errorf("cannot scan authorization attributes: %w", err)
 		}
 

pkg/coredata/risk_assessment_node.go

@@ -73,10 +73,11 @@ func (n *RiskAssessmentNode) AuthorizationAttributes(
 	defer rows.Close()
 
 	attrsByID := make(policy.AttributesByID)
+
 	for rows.Next() {
 		var id, organizationID gid.GID
-		err := rows.Scan(&id, &organizationID)
+
-		if err != nil {
+		if err := rows.Scan(&id, &organizationID); err != nil {
 			return nil, fmt.Errorf("cannot scan authorization attributes: %w", err)
 		}
 

pkg/coredata/risk_assessment_process.go

@@ -74,10 +74,11 @@ func (p *RiskAssessmentProcess) AuthorizationAttributes(
 	defer rows.Close()
 
 	attrsByID := make(policy.AttributesByID)
+
 	for rows.Next() {
 		var id, organizationID gid.GID
-		err := rows.Scan(&id, &organizationID)
+
-		if err != nil {
+		if err := rows.Scan(&id, &organizationID); err != nil {
 			return nil, fmt.Errorf("cannot scan authorization attributes: %w", err)
 		}
 

pkg/coredata/risk_assessment_scenario.go

@@ -72,10 +72,11 @@ func (s *RiskAssessmentScenario) AuthorizationAttributes(
 	defer rows.Close()
 
 	attrsByID := make(policy.AttributesByID)
+
 	for rows.Next() {
 		var id, organizationID gid.GID
-		err := rows.Scan(&id, &organizationID)
+
-		if err != nil {
+		if err := rows.Scan(&id, &organizationID); err != nil {
 			return nil, fmt.Errorf("cannot scan authorization attributes: %w", err)
 		}
 

pkg/coredata/risk_assessment_scope.go

@@ -71,10 +71,11 @@ func (s *RiskAssessmentScope) AuthorizationAttributes(
 	defer rows.Close()
 
 	attrsByID := make(policy.AttributesByID)
+
 	for rows.Next() {
 		var id, organizationID gid.GID
-		err := rows.Scan(&id, &organizationID)
+
-		if err != nil {
+		if err := rows.Scan(&id, &organizationID); err != nil {
 			return nil, fmt.Errorf("cannot scan authorization attributes: %w", err)
 		}
 

pkg/coredata/risk_assessment_threat.go

@@ -74,10 +74,11 @@ func (t *RiskAssessmentThreat) AuthorizationAttributes(
 	defer rows.Close()
 
 	attrsByID := make(policy.AttributesByID)
+
 	for rows.Next() {
 		var id, organizationID gid.GID
-		err := rows.Scan(&id, &organizationID)
+
-		if err != nil {
+		if err := rows.Scan(&id, &organizationID); err != nil {
 			return nil, fmt.Errorf("cannot scan authorization attributes: %w", err)
 		}
 

pkg/coredata/saml_configuration.go

@@ -83,10 +83,11 @@ func (s *SAMLConfiguration) AuthorizationAttributes(
 	defer rows.Close()
 
 	attrsByID := make(policy.AttributesByID)
+
 	for rows.Next() {
 		var id, organizationID gid.GID
-		err := rows.Scan(&id, &organizationID)
+
-		if err != nil {
+		if err := rows.Scan(&id, &organizationID); err != nil {
 			return nil, fmt.Errorf("cannot scan authorization attributes: %w", err)
 		}
 

pkg/coredata/scim_bridge.go

@@ -80,10 +80,11 @@ func (s *SCIMBridge) AuthorizationAttributes(
 	defer rows.Close()
 
 	attrsByID := make(policy.AttributesByID)
+
 	for rows.Next() {
 		var id, organizationID gid.GID
-		err := rows.Scan(&id, &organizationID)
+
-		if err != nil {
+		if err := rows.Scan(&id, &organizationID); err != nil {
 			return nil, fmt.Errorf("cannot scan authorization attributes: %w", err)
 		}
 

pkg/coredata/scim_configuration.go

@@ -70,10 +70,11 @@ func (s *SCIMConfiguration) AuthorizationAttributes(
 	defer rows.Close()
 
 	attrsByID := make(policy.AttributesByID)
+
 	for rows.Next() {
 		var id, organizationID gid.GID
-		err := rows.Scan(&id, &organizationID)
+
-		if err != nil {
+		if err := rows.Scan(&id, &organizationID); err != nil {
 			return nil, fmt.Errorf("cannot scan authorization attributes: %w", err)
 		}
 

pkg/coredata/scim_event.go

@@ -76,10 +76,11 @@ func (s *SCIMEvent) AuthorizationAttributes(
 	defer rows.Close()
 
 	attrsByID := make(policy.AttributesByID)
+
 	for rows.Next() {
 		var id, organizationID gid.GID
-		err := rows.Scan(&id, &organizationID)
+
-		if err != nil {
+		if err := rows.Scan(&id, &organizationID); err != nil {
 			return nil, fmt.Errorf("cannot scan authorization attributes: %w", err)
 		}
 

pkg/coredata/session.go

@@ -221,6 +221,7 @@ WHERE
 	defer rows.Close()
 
 	attrsByID := make(policy.AttributesByID, len(resourceIDs))
+
 	for rows.Next() {
 		var (
 			id         gid.GID

pkg/coredata/slack_message.go

@@ -77,10 +77,11 @@ func (sm *SlackMessage) AuthorizationAttributes(
 	defer rows.Close()
 
 	attrsByID := make(policy.AttributesByID)
+
 	for rows.Next() {
 		var id, organizationID gid.GID
-		err := rows.Scan(&id, &organizationID)
+
-		if err != nil {
+		if err := rows.Scan(&id, &organizationID); err != nil {
 			return nil, fmt.Errorf("cannot scan authorization attributes: %w", err)
 		}
 

pkg/coredata/statement_of_applicability.go

@@ -72,10 +72,11 @@ func (s *StatementOfApplicability) AuthorizationAttributes(
 	defer rows.Close()
 
 	attrsByID := make(policy.AttributesByID)
+
 	for rows.Next() {
 		var id, organizationID gid.GID
-		err := rows.Scan(&id, &organizationID)
+
-		if err != nil {
+		if err := rows.Scan(&id, &organizationID); err != nil {
 			return nil, fmt.Errorf("cannot scan authorization attributes: %w", err)
 		}
 

pkg/coredata/task.go

@@ -83,10 +83,11 @@ func (t *Task) AuthorizationAttributes(
 	defer rows.Close()
 
 	attrsByID := make(policy.AttributesByID)
+
 	for rows.Next() {
 		var id, organizationID gid.GID
-		err := rows.Scan(&id, &organizationID)
+
-		if err != nil {
+		if err := rows.Scan(&id, &organizationID); err != nil {
 			return nil, fmt.Errorf("cannot scan authorization attributes: %w", err)
 		}
 

pkg/coredata/third_party.go

@@ -201,10 +201,11 @@ func (v *ThirdParty) AuthorizationAttributes(
 	defer rows.Close()
 
 	attrsByID := make(policy.AttributesByID)
+
 	for rows.Next() {
 		var id, organizationID gid.GID
-		err := rows.Scan(&id, &organizationID)
+
-		if err != nil {
+		if err := rows.Scan(&id, &organizationID); err != nil {
 			return nil, fmt.Errorf("cannot scan authorization attributes: %w", err)
 		}
 

pkg/coredata/third_party_business_associate_agreement.go

@@ -72,10 +72,11 @@ func (vbaa *ThirdPartyBusinessAssociateAgreement) AuthorizationAttributes(
 	defer rows.Close()
 
 	attrsByID := make(policy.AttributesByID)
+
 	for rows.Next() {
 		var id, organizationID gid.GID
-		err := rows.Scan(&id, &organizationID)
+
-		if err != nil {
+		if err := rows.Scan(&id, &organizationID); err != nil {
 			return nil, fmt.Errorf("cannot scan authorization attributes: %w", err)
 		}
 

pkg/coredata/third_party_compliance_report.go

@@ -73,10 +73,11 @@ func (v *ThirdPartyComplianceReport) AuthorizationAttributes(
 	defer rows.Close()
 
 	attrsByID := make(policy.AttributesByID)
+
 	for rows.Next() {
 		var id, organizationID gid.GID
-		err := rows.Scan(&id, &organizationID)
+
-		if err != nil {
+		if err := rows.Scan(&id, &organizationID); err != nil {
 			return nil, fmt.Errorf("cannot scan authorization attributes: %w", err)
 		}
 

pkg/coredata/third_party_contact.go

@@ -77,10 +77,11 @@ func (vc *ThirdPartyContact) AuthorizationAttributes(
 	defer rows.Close()
 
 	attrsByID := make(policy.AttributesByID)
+
 	for rows.Next() {
 		var id, organizationID gid.GID
-		err := rows.Scan(&id, &organizationID)
+
-		if err != nil {
+		if err := rows.Scan(&id, &organizationID); err != nil {
 			return nil, fmt.Errorf("cannot scan authorization attributes: %w", err)
 		}
 

pkg/coredata/third_party_data_privacy_agreement.go

@@ -72,10 +72,11 @@ func (vdpa *ThirdPartyDataPrivacyAgreement) AuthorizationAttributes(
 	defer rows.Close()
 
 	attrsByID := make(policy.AttributesByID)
+
 	for rows.Next() {
 		var id, organizationID gid.GID
-		err := rows.Scan(&id, &organizationID)
+
-		if err != nil {
+		if err := rows.Scan(&id, &organizationID); err != nil {
 			return nil, fmt.Errorf("cannot scan authorization attributes: %w", err)
 		}
 

pkg/coredata/third_party_risk_assessment.go

@@ -74,10 +74,11 @@ func (v *ThirdPartyRiskAssessment) AuthorizationAttributes(
 	defer rows.Close()
 
 	attrsByID := make(policy.AttributesByID)
+
 	for rows.Next() {
 		var id, organizationID gid.GID
-		err := rows.Scan(&id, &organizationID)
+
-		if err != nil {
+		if err := rows.Scan(&id, &organizationID); err != nil {
 			return nil, fmt.Errorf("cannot scan authorization attributes: %w", err)
 		}
 

pkg/coredata/third_party_service.go

@@ -72,10 +72,11 @@ func (vs *ThirdPartyService) AuthorizationAttributes(
 	defer rows.Close()
 
 	attrsByID := make(policy.AttributesByID)
+
 	for rows.Next() {
 		var id, organizationID gid.GID
-		err := rows.Scan(&id, &organizationID)
+
-		if err != nil {
+		if err := rows.Scan(&id, &organizationID); err != nil {
 			return nil, fmt.Errorf("cannot scan authorization attributes: %w", err)
 		}
 

pkg/coredata/tracker_pattern.go

@@ -99,10 +99,11 @@ func (tp *TrackerPattern) AuthorizationAttributes(
 	defer rows.Close()
 
 	attrsByID := make(policy.AttributesByID)
+
 	for rows.Next() {
 		var id, organizationID gid.GID
-		err := rows.Scan(&id, &organizationID)
+
-		if err != nil {
+		if err := rows.Scan(&id, &organizationID); err != nil {
 			return nil, fmt.Errorf("cannot scan authorization attributes: %w", err)
 		}
 

pkg/coredata/tracker_resource.go

@@ -87,10 +87,11 @@ func (tr *TrackerResource) AuthorizationAttributes(
 	defer rows.Close()
 
 	attrsByID := make(policy.AttributesByID)
+
 	for rows.Next() {
 		var id, organizationID gid.GID
-		err := rows.Scan(&id, &organizationID)
+
-		if err != nil {
+		if err := rows.Scan(&id, &organizationID); err != nil {
 			return nil, fmt.Errorf("cannot scan authorization attributes: %w", err)
 		}
 

pkg/coredata/transfer_impact_assessment.go

@@ -182,10 +182,11 @@ func (tia *TransferImpactAssessment) AuthorizationAttributes(
 	defer rows.Close()
 
 	attrsByID := make(policy.AttributesByID)
+
 	for rows.Next() {
 		var id, organizationID gid.GID
-		err := rows.Scan(&id, &organizationID)
+
-		if err != nil {
+		if err := rows.Scan(&id, &organizationID); err != nil {
 			return nil, fmt.Errorf("cannot scan authorization attributes: %w", err)
 		}
 

pkg/coredata/trust_center.go

@@ -76,10 +76,11 @@ func (tc *TrustCenter) AuthorizationAttributes(
 	defer rows.Close()
 
 	attrsByID := make(policy.AttributesByID)
+
 	for rows.Next() {
 		var id, organizationID gid.GID
-		err := rows.Scan(&id, &organizationID)
+
-		if err != nil {
+		if err := rows.Scan(&id, &organizationID); err != nil {
 			return nil, fmt.Errorf("cannot scan authorization attributes: %w", err)
 		}
 

pkg/coredata/trust_center_access.go

@@ -72,10 +72,11 @@ func (tca *TrustCenterAccess) AuthorizationAttributes(
 	defer rows.Close()
 
 	attrsByID := make(policy.AttributesByID)
+
 	for rows.Next() {
 		var id, organizationID gid.GID
-		err := rows.Scan(&id, &organizationID)
+
-		if err != nil {
+		if err := rows.Scan(&id, &organizationID); err != nil {
 			return nil, fmt.Errorf("cannot scan authorization attributes: %w", err)
 		}
 

pkg/coredata/trust_center_document_access.go

@@ -73,10 +73,11 @@ func (tcda *TrustCenterDocumentAccess) AuthorizationAttributes(
 	defer rows.Close()
 
 	attrsByID := make(policy.AttributesByID)
+
 	for rows.Next() {
 		var id, organizationID gid.GID
-		err := rows.Scan(&id, &organizationID)
+
-		if err != nil {
+		if err := rows.Scan(&id, &organizationID); err != nil {
 			return nil, fmt.Errorf("cannot scan authorization attributes: %w", err)
 		}
 

pkg/coredata/trust_center_file.go

@@ -74,10 +74,11 @@ func (t *TrustCenterFile) AuthorizationAttributes(
 	defer rows.Close()
 
 	attrsByID := make(policy.AttributesByID)
+
 	for rows.Next() {
 		var id, organizationID gid.GID
-		err := rows.Scan(&id, &organizationID)
+
-		if err != nil {
+		if err := rows.Scan(&id, &organizationID); err != nil {
 			return nil, fmt.Errorf("cannot scan authorization attributes: %w", err)
 		}
 

pkg/coredata/trust_center_reference.go

@@ -80,10 +80,11 @@ func (t *TrustCenterReference) AuthorizationAttributes(
 	defer rows.Close()
 
 	attrsByID := make(policy.AttributesByID)
+
 	for rows.Next() {
 		var id, organizationID gid.GID
-		err := rows.Scan(&id, &organizationID)
+
-		if err != nil {
+		if err := rows.Scan(&id, &organizationID); err != nil {
 			return nil, fmt.Errorf("cannot scan authorization attributes: %w", err)
 		}
 

pkg/coredata/webhook_subscription.go

@@ -104,10 +104,11 @@ func (w *WebhookSubscription) AuthorizationAttributes(
 	defer rows.Close()
 
 	attrsByID := make(policy.AttributesByID)
+
 	for rows.Next() {
 		var id, organizationID gid.GID
-		err := rows.Scan(&id, &organizationID)
+
-		if err != nil {
+		if err := rows.Scan(&id, &organizationID); err != nil {
 			return nil, fmt.Errorf("cannot scan authorization attributes: %w", err)
 		}
 

pkg/iam/authorizer.go

@@ -387,6 +387,7 @@ func (a *Authorizer) evaluateMultiInTx(
 	// On failure, ErrAssumptionRequired is recorded only against items that
 	// did not opt out.
 	var assumptionErr error
+
 	if requiresAssumptionCheck {
 		err := a.checkAssumption(
 			ctx,
@@ -431,6 +432,7 @@ func (a *Authorizer) evaluateMultiInTx(
 
 	decisions := make([]error, len(params.Items))
 	itemAttrs := make([]policy.Attributes, len(params.Items))
+
 	for i, item := range params.Items {
 		resAttrs := resourceAttrsByResourceID[item.Resource]
 		if len(item.ResourceAttributes) > 0 {
@@ -438,6 +440,7 @@ func (a *Authorizer) evaluateMultiInTx(
 			maps.Copy(merged, item.ResourceAttributes)
 			resAttrs = merged
 		}
+
 		itemAttrs[i] = resAttrs
 
 		if assumptionErr != nil && !item.SkipAssumptionCheck {

pkg/iam/authorizer_batch_test.go

@@ -986,6 +986,7 @@ func insertBatchTestChildSession(
 	expiredAt := now.Add(30 * time.Minute)
 
 	var expireReason *coredata.ExpireReason
+
 	if expired {
 		reason := coredata.ExpireReasonRevoked
 		expireReason = &reason
@@ -1039,6 +1040,7 @@ func countAuditLogsForAction(t *testing.T, ctx context.Context, client *pg.Clien
 	t.Helper()
 
 	var count int
+
 	require.NoError(t, client.WithTx(ctx, func(ctx context.Context, tx pg.Tx) error {
 		if err := tx.QueryRow(
 			ctx,

pkg/iam/authorizer_unit_test.go

@@ -83,7 +83,6 @@ func TestAuthorizer_ValidateInputs(t *testing.T) {
 		_, ok := errors.AsType[*ErrEmptyResourceBatch](err)
 		require.True(t, ok)
 	})
-
 }
 
 func TestAuthorizer_InternalErrorPaths(t *testing.T) {

pkg/iam/errors_test.go

@@ -106,6 +106,7 @@ func TestAuthorizeRelatedErrors_Error(t *testing.T) {
 	for _, tt := range tests {
 		t.Run(tt.name, func(t *testing.T) {
 			t.Parallel()
+
 			if tt.err.Error() != tt.want {
 				t.Errorf("Error() = %q, want %q", tt.err.Error(), tt.want)
 			}