The permissions a section — one page of a document — opens with on its page, in its sitemap entry and wherever else a reader is let in: its own, else those of the nearest parent section that names some, else its document's (the workspace's). What a section names itself always wins over what it would take from above, and a section of a document that names nothing, under parents that name nothing, is public.

A parent section counts while it exists, whatever its review status. The sections and documents above are read only for the sections that name nothing themselves, once per site for the whole batch.

calculate :effective_permissions, {:array, :string}, EffectivePermissions