| Explore mode authorizes the root document itself (resolveAndAuthorize(root, VIEW)), so get_tree root="Space" is refused when the caller may view pages inside the space but not its WebHome. Since LLMAI-182 the survey handles this case for small spaces (the line drops its home ref and the viewable pages are listed inline), but a partly denied space with more viewable pages than the inline threshold still shows only its summary line and cannot be explored: the caller is told the pages exist and has no way to list them. Affects any restricted user, not only guests. Expected / proposal: Allow exploring under a root whose own document is not viewable when it is a space home: skip the root line (or render it without a ref) and list the authorized children as today (each child is already authorized individually, and explore mode already drops denied pages silently). Keep refusing a non-home root the caller may not view. Check that the change leaks no existence information beyond what the survey already shows (the survey line only exists when at least one page is viewable). |
