Protected by server-side authorization and database-enforced role guards.