- # Link head points to this row, or to the owner of this row
- # (or owner of object described by this row, for logs table only)
- # Link tail originates from this user, or a group that is readable by this user
- # Link is any permission link ('write' and 'manage' implicitly grant 'read')
+ # Link head points to this row, or to the owner of this row (the thing to be read)
+ # (or the object described by this row, for logs table only)
+ # Link tail originates from this user, or a group that is readable by this
+ # user (the identity with authorization to read)
+ # Link is any permission link ('write' and 'manage' implicitly include 'read')
+ # The existence of such a link is tested in the where clause as permissions.head_uuid IS NOT NULL.
+ # or
+ # User is admin