pg-access-control-raises-permission-error
IN premise
`PgApi.show_node()` raises `PermissionError` when called with a `visible_to` list that doesn't intersect the node's `access_tags`, enforcing per-node access control at the API boundary
Summary
When someone tries to view a node they shouldn't have access to, the system actively blocks them by raising an error right at the API layer. This means access control is enforced early, before any data leaks out, rather than relying on downstream filtering.
Details
| Source | entries/2026/04/29/tests-test_pg.md |