Select tenant logging policy from the resource owner

When privileged users can act across tenants, select resource-specific redaction from the authoritative resource owner after authorization, rather than the operator's active membership. Otherwise a valid cross-tenant operation can silently select the wrong logging contract. Test both directions: a stricter resource accessed from a less restrictive active tenant, and the converse where existing diagnostics must remain unchanged. Keep response authorization and log redaction as separate assertions. This rule assumes the policy belongs to the resource; actor-based compliance policies may require an additional decision.

Applies when: A shared endpoint has tenant-specific logging rules and privileged cross-tenant access. Keywords: tenant redaction logging ownership superadmin membership middleware regression