The URL path a resource's ACL is served at — where the engine fetches an
actor's grants for that resource (and the canonical encoding of the shape
a caller passes as grantsFromPath). Known for dataset
(/projects/<id>/datasets/<ds>/acl) and canvas
(/canvases/<resourceId>/acl); undefined for resource types without a
known grants endpoint, so a caller can degrade open (no grants → no
advisory forecast) instead of guessing a path.
The URL path a resource's ACL is served at — where the engine fetches an actor's grants for that resource (and the canonical encoding of the shape a caller passes as
grantsFromPath). Known fordataset(/projects/<id>/datasets/<ds>/acl) andcanvas(/canvases/<resourceId>/acl);undefinedfor resource types without a known grants endpoint, so a caller can degrade open (no grants → no advisory forecast) instead of guessing a path.