Comments, Sharing, and Permissions

Comments are attached to document resources. Sharing changes the effective object permission and should be treated as an access-control operation.

Safe share flow

1. Read resource permissions.

2. Confirm the target user and intended role.

3. Apply the smallest role: viewer, commenter, editor, or admin.

4. Re-read permissions.

5. Remove the grant when the collaboration ends.

Public access is separate from authenticated sharing. Publishing a document is also separate from making a resource public.