Navigation tree displays an arrow even in case of private page in hierarchy

Marius Dumitru Florea added a comment - 26/Apr/21 11:09 With the current architecture we have in place access rights cannot be check at database query time. This has multiple side effects: counts don't take access rights into account; we're not going to retrieve all the results and check access rights on each of them just to compute the count; this is true for page tree, live table, search results, etc. page references (including page name, but not page title) are not protected and thus are not considered as private information; any user with script right can write a script to list page references or to count them; page tree, live table and search try to hide them when possible, but this leads to pagination holes (because if previous point). Again, it can be very costly to find the next 10 pages that the current user can view (you can have 1k pages and the user might have view access to only one, and you might end up checking access right for all of them to find that single page). So this is not easy to fix and I think we should find/create a more generic issue and close this as duplicate, because we can create tens of issues like this but the root problem is the same: access rights cannot be checked at query time.