Function hidden_of_user 

pub fn hidden_of_user(u: &str) -> String

The groups a user may not read, as an SQL expression (uuid[]) for the user aliased u. Used to evaluate the change and request guards for notification recipients and to build the Actor.

• non-administrators: every restricted group they are no member of;
• administrators: only the restricted groups whose need-to-know policy (project_policies.admin_read) shuts them out, they are no member of, and for which they hold no running elevation. Without a policy row an administrator reads everything, as before;
• everybody, members and administrators alike: the restricted groups whose conditions on membership (identity-provider claims, maximum sign-in age) the user does not meet (services::membership_conditions::unmet_sql). The conditions that depend on the request (networks, the session’s age) are applied to the actor afterwards (membership_conditions::apply).