We had two linked issues 1. default path was not taking permissions into account and could link to an object user does not have read access on's page 2. visiting the url of an object the user does not have read access on was possible and returned a "blank" page Before https://github.com/user-attachments/assets/e4da1de5-d7e9-4644-ba8e-cd366a9b0fad After https://github.com/user-attachments/assets/6576f662-d3a0-4173-8b48-233cc0a04cdf Also tested with V1.