[RubenCerna2079]

Why make this change?

• https://msdata.visualstudio.com/Database%20Systems/_workitems/edit/5597851

What is this change?

Checks that the database policy didn't compile to an empty predicate, in case that it does it will send a log warning message in development mode or throw an error in production mode.
Created the new AuditDatabasePolicyFailOpen function to create the log message and throw an error in case DAB is in production mode.

How was this tested?

• Integration Tests
• Unit Tests
  Added tests to ensure that an empty policy will return the expected log message and throw an error only if it is in production mode.

Sample Request(s)

[Copilot]

🟡 Changes recommended

Nonempty policy text can still produce a null filter during parsing, bypassing the production safeguard.

1 open issue

• Reject configured policies that parse to a null OData clause · New

What changed in this PR

This PR adds protection against configured database authorization policies that resolve to empty text, warning in development and rejecting requests in production.

Changes:

• Adds structured audit logging and production authorization errors for empty resolved policies.
• Allows authorization tests to inject a logger.
• Adds tests for host-mode behavior and valid or unconfigured policies.

File	Description
src/​Service.Tests/​Authorization/​AuthorizationResolverUnitTests.cs	Tests empty-policy handling and audit contents.
src/​Service.Tests/​Authorization/​AuthorizationHelpers.cs	Supports logger injection for tests.
src/​Core/​Authorization/​AuthorizationResolver.cs	Adds empty-policy detection, auditing, and production rejection.

_{Review effort: Balanced}