Member Junction
    Preparing search index...
    • Checks whether a principal may render a stored template on demand. A run is refused for:

      • a missing principal
      • a scope-limited session (an anonymous magic-link or widget guest, or a resource-scoped magic-link session), whose confinement exists only as row-level security on entity reads
      • a principal without read permission on MJ: Templates and MJ: Template Contents

      Row-level security on the requested template still applies when the caller loads it.

      Parameters

      • user: UserInfo

        the acting principal

      • metadata: Pick<IMetadataProvider, "EntityByName">

        the source of entity permissions; a missing provider refuses the run

      Returns string

      null when the run may proceed, otherwise the reason it is refused