permissions display

common/src/proto/komp_ac.tables_data.rs

@@ -217,7 +217,7 @@ pub struct DeleteTableDataRequest {
 /// Soft-delete response.
 #[derive(Clone, Copy, PartialEq, Eq, Hash, ::prost::Message)]
 pub struct DeleteTableDataResponse {
-    /// True if a row was marked deleted (id existed and was not already deleted).
+    /// True when the row was successfully marked deleted.
     #[prost(bool, tag = "1")]
     pub success: bool,
 }
@@ -309,7 +309,9 @@ pub struct GetTableDataResponse {
     #[prost(string, repeated, tag = "3")]
     pub row_display_columns: ::prost::alloc::vec::Vec<::prost::alloc::string::String>,
     /// Links keyed by their public column name. Each value contains the row as
-    /// saved by this record and the newest available state of the linked row.
+    /// saved by this record and, when the caller may read the target table, its
+    /// newest available state. Restricted links contain only the target table's
+    /// configured display columns.
     #[prost(map = "string, message", tag = "4")]
     pub resolved_links: ::std::collections::HashMap<
         ::prost::alloc::string::String,
@@ -352,6 +354,9 @@ pub enum ResolvedTableLinkStatus {
     Superseded = 1,
     Unavailable = 2,
     Deleted = 3,
+    /// The source row may expose the FK and the target's configured display
+    /// columns, but the caller may not read the target table itself.
+    Restricted = 4,
 }
 impl ResolvedTableLinkStatus {
     /// String value of the enum field names used in the ProtoBuf definition.
@@ -364,6 +369,7 @@ impl ResolvedTableLinkStatus {
             Self::Superseded => "SUPERSEDED",
             Self::Unavailable => "UNAVAILABLE",
             Self::Deleted => "DELETED",
+            Self::Restricted => "RESTRICTED",
         }
     }
     /// Creates an enum from field names used in the ProtoBuf definition.
@@ -373,6 +379,7 @@ impl ResolvedTableLinkStatus {
             "SUPERSEDED" => Some(Self::Superseded),
             "UNAVAILABLE" => Some(Self::Unavailable),
             "DELETED" => Some(Self::Deleted),
+            "RESTRICTED" => Some(Self::Restricted),
             _ => None,
         }
     }