Record-scoped allowRead: unified row-level read access control (#1422 gap 2)#1786

Merged

kriszyp merged 12 commits into

mainfrom

kris/record-level-allowread

Jul 15, 2026

Commits on Jul 14, 2026

Record-scoped allowRead: unified row-level read access control (#1422 gap 2)

kriszyp
and
claude
committed
review: exclude subscribe/connect from per-record deferral (would grant unchecked)

kriszyp
and
claude
committed
review: compose attribute_permissions narrowing with overrides; tighten get deferral gate

kriszyp
and
claude
committed
fix: record-scoping is sync-only — async allowRead overrides keep the awaited entry check

kriszyp
and
claude
committed
review: defer per-record enforcement for id-seeded search/query (prefix scans are multi-record)

kriszyp
and
claude
committed
Record-scoped allowRead on subscription delivery (#1419, revives #1524) + GraphQL checkPermission

kriszyp
and
claude
committed
fix: subscribe keeps its entry check (connection grant) — don't defer

kriszyp
and
claude
committed
test: cover re-auth default-fallback for a record-scoped-override subscription (#1414 × #1419)

kriszyp
and
claude
committed
review: re-auth mirrors the subscribe entry check (re-runs the override), not the default

kriszyp
and
claude
committed
review(cb1kenobi): fix QUERY-verb bypass, unfrozen delivery record, stale/anon subscription gate; clarify async

kriszyp
and
claude
committed
test: subscription delivery re-evaluates against the live user (#1414 in-place re-auth)

kriszyp
and
claude
committed

Commits on Jul 15, 2026

review(heskew): fix QUERY checkPermission bypass, freeze source-revalidation guard view, swallow rejected-thenable rejections, bound previousCount backfill scan

kriszyp
and
claude
committed