Enforce per-page read permission on the Subject, Layout, and RDF read endpoints#1058

Merged

JeroenDeDauw merged 17 commits into

per-page-read-gates

Jul 17, 2026

Commits on Jul 16, 2026

Add a binding per-page Subject read authorizer

alistair3149
and
claude
committed
Enforce per-page read permission on the RDF export endpoint

alistair3149
and
claude
committed
Enforce per-page read permission on the page-Subjects endpoint

alistair3149
and
claude
committed
Enforce per-page read permission on the Subject endpoint

alistair3149
and
claude
committed
Enforce per-page read permission on the Subject validate endpoint

alistair3149
and
claude
committed
Enforce per-page read permission on Layout reads

alistair3149
and
claude
committed
Filter unreadable Schema pages out of schema-name enumeration

alistair3149
and
claude
committed
Upgrade the Schema and Mapping read gates to authorizeRead

alistair3149
and
claude
committed
Document per-page read permission behavior of the REST API

alistair3149
and
claude
committed
Tighten the permission docs and gate comments after final review

alistair3149
and
claude
committed
Pin the schema-names gate and streamline the validate gate

alistair3149
and
claude
committed
Fail closed on unresolvable pages in the page-Subjects gate

alistair3149
and
claude
committed
Make the Mapping gate test a unit test to fix suite pollution
alistair3149
committed
Trim the REST API permissions docs to expected behavior
alistair3149
committed

Commits on Jul 17, 2026

Pin the Schema name search read gate and correct the permissions docs (#1071)

JeroenDeDauw
and
claude
authored
Gate page reads through a single PageReadAuthorizer

authored and
alistair3149
committed
Name the two page-readability checks for what they decide

authored and
alistair3149
committed