Knowledge: folders and security — user page, developer guide, and corrections
Three things.
NEW: Knowledge-Folders-and-Security.md (user-facing)
Folders and shortcuts, the four views, multi-select, the open/restricted model
and what the list means in each, inheritance and the exceptions report, the
containers-vs-filing setting, where the rules are enforced, and the
administrator floor. Includes the warning that "I removed myself from the team
and can still see it" is not a valid test while you hold the floor.
NEW: Knowledge-Folders-and-Security-Developer-Guide.md
The choke point and why knowledgeCanRead() is built on the list clause; how the
ACL fragment is assembled and why the tree is walked in PHP rather than with a
recursive CTE; #1217 (the most restrictive state turned the guard off) with the
generalisation; polarity on the object rather than the rows. Then §4 the four
renderers with code - list and cards are ONE renderer, data-article as the
unifying handle, DOM order for ranges, the tree drawing its whole shape from one
fetch and the two bugs that came from that - and §5 drag and drop, including one
rule for the highlight rather than four copies. §6 collects the testing traps.
CORRECTED: Knowledge-Folders-and-Permissions.md
It contradicted the shipped product in three places. Marked inline rather than
rewritten, so the reasoning that turned out wrong is still on the record:
- §10 "three view modes deliberately not built" - all four exist. The estimate
was wrong: list and cards are one renderer, so it was two, not three.
- §10 properties/security panel - shipped as a modal, not a left-panel tab.
- §10 mobile action row - now built, mobile.css layer 17k.
§15 Build status rewritten: it still said "no interface, the feature is inert".
Now records what shipped and what is still outstanding - user groups have no
screen, and the audit trail is recorded but never displayed.
UPDATED: Knowledge.md
Added Folders, Permissions and Attached documents sections; test count 57 -> 88;
dropped the stale "one of the four modules" on mobile.
Every referenced file verified to exist; every internal link resolves.