2 docs tagged with "permissions"

Verified UI visibility, protected-route checks and backend authorization boundaries.

Public-safe authorization, tenant scope, auditability, least privilege, data quality, and ownership guidance.