pub const SECTIONS: [(&str, Disclosure); 29];Expand description
Every top-level section /api/view and /api/reviews serve.
filter_response drives off this table and drops any section that
has no row here, so a section added to the view without being
classified is withheld from readers lacking a node-wide grant rather
than served to all of them.
The omission is the failure mode worth designing against, because it
has already happened once: changes was added to the view while the
filter’s section list was maintained by hand, and every authenticated
reader received every change record — owner channel, workspace and
revisions — for repositories they held no grant on. Failing closed
keeps that quiet, so
every_section_the_view_serves_is_classified in tests/it/acl.rs
makes it loud, comparing this table against a view a real node
served rather than against a sample written from memory.