KF6 — Load-by-PK enforcement (live, self-cleaning fixture).
§5.5 site 4 — the concrete path a PreRunViewHook implementation would have missed:
BaseEntity.Load() by primary key. A principal with a Read key binding must NOT be able to
load a row outside its filter, while the SAME principal without the binding loads it fine
(the binding — not permissions — is the discriminator).
KF6 — Load-by-PK enforcement (live, self-cleaning fixture). §5.5 site 4 — the concrete path a PreRunViewHook implementation would have missed: BaseEntity.Load() by primary key. A principal with a Read key binding must NOT be able to load a row outside its filter, while the SAME principal without the binding loads it fine (the binding — not permissions — is the discriminator).