Navigation Visibility Supplements Authorization

Context

A direct address reaches a page without using its menu entry. A snapshot-based menu can also outlive a permission change.

Decision

Filter inaccessible entries from navigation and offer settings areas with visible work. Require destination and service checks independently of that filtering.

Alternatives Considered

Disabled entries can overwhelm the map with unusable work. Trusting visibility as authorization leaves direct entry and stale links unchecked.

Consequences

Destination guards remain necessary. Unconditional links need protection at their destinations. The observed visibility policy remains proposed pending confirmation.