Pin denial on a warm Schema and Mapping cache#1073

Draft

malberts wants to merge 15 commits into

pr-1058-review-fixes-cache

Commits on Jul 16, 2026

Add a binding per-page Subject read authorizer

alistair3149
and
claude
committed
Enforce per-page read permission on the RDF export endpoint

alistair3149
and
claude
committed
Enforce per-page read permission on the page-Subjects endpoint

alistair3149
and
claude
committed
Enforce per-page read permission on the Subject endpoint

alistair3149
and
claude
committed
Enforce per-page read permission on the Subject validate endpoint

alistair3149
and
claude
committed
Enforce per-page read permission on Layout reads

alistair3149
and
claude
committed
Filter unreadable Schema pages out of schema-name enumeration

alistair3149
and
claude
committed
Upgrade the Schema and Mapping read gates to authorizeRead

alistair3149
and
claude
committed
Document per-page read permission behavior of the REST API

alistair3149
and
claude
committed
Tighten the permission docs and gate comments after final review

alistair3149
and
claude
committed
Pin the schema-names gate and streamline the validate gate

alistair3149
and
claude
committed
Fail closed on unresolvable pages in the page-Subjects gate

alistair3149
and
claude
committed
Make the Mapping gate test a unit test to fix suite pollution
alistair3149
committed
Trim the REST API permissions docs to expected behavior
alistair3149
committed

Commits on Jul 17, 2026

Pin denial on a warm schema and Mapping cache

malberts
and
claude
committed