The document extension's admin pages and the one sidebar entry that links to them — a "sidebar:menus" plugin (MishkaCmsCore.Sidebar).

Only document is a link; it lands in the core's Plugins section. The core never names this extension, so removing it removes the entry and nothing in MishkaCmsCore.Sidebar changes.

The other eight are nav: false — pages, not links. They are declared because they do NOT share one answer to "who may open this": the workspace pages are admin:dashboard:document:workspace, everything hanging off a section is admin:dashboard:document:section, and the event log opens for either and shows each area the events of its own records (MishkaDocument.EventLog.logged/1). The link carries the union, since holding either is reason enough to be shown the section. The data behind each page asks for the same area.

Three of them are parameterised routes that could never be a static link anyway (/document/sections/:workspace_version_id and friends) — declaring them here is the only place their gate can be written down.

Each page reads its own gate from here, so the permission is written down once:

on_mount {MishkaCmsCore.LiveUserAuth,
          {:require_permission, MishkaDocumentWeb.SidebarMenu.permissions("document.issues")}}

Registered in MishkaDocument.Application.