PE4 — DENY: an unknown domain fails CLOSED. Asking the aggregator about a domain that has no
catalog row (or whose provider failed to load) must return Allowed: false with a Reason that
names the domain, and GetResourcePermissions must return []. The alternative — silently
treating "no provider" as "no restriction" — would be a security hole.
PE4 — DENY: an unknown domain fails CLOSED. Asking the aggregator about a domain that has no catalog row (or whose provider failed to load) must return
Allowed: falsewith a Reason that names the domain, andGetResourcePermissionsmust return[]. The alternative — silently treating "no provider" as "no restriction" — would be a security hole.