Function assert_can_read_glw_data 

pub async fn assert_can_read_glw_data(
    db: &SqlitePool,
    current_user: Uuid,
    glw_data_id: Uuid,
) -> Result<GlwDataRow, Error>

Permission gate for reading a GLW data row. Personal: must be the owner. Group: must be a member of the owning group.

Errors

Returns Error::NotFound when the row is missing or invisible — the two cases are collapsed so an attacker cannot confirm existence by id.