Enforce the author-trust gate (issue #213) on a dashboard write. Trusted authors
(global editor/admin) may use any profile and skip the check (and its lookups).
For an untrusted author (an ACL-only editor — a global viewer with a per-dashboard
grant), resolve which referenced profiles are non-public and reject any datasource
that newly adds or modifies a reference to one. Throws FORBIDDEN on the first.
Enforce the author-trust gate (issue #213) on a dashboard write. Trusted authors (global
editor/admin) may use any profile and skip the check (and its lookups). For an untrusted author (an ACL-only editor — a global viewer with a per-dashboard grant), resolve which referenced profiles are non-public and reject any datasource that newly adds or modifies a reference to one. ThrowsFORBIDDENon the first.