Arbitrary Permissions on Record Lists and Records

[mlohoar]

I have seen in other implementations a hook which allows the altering of the records that are returned for a request. there could be an event like beforeRead beforeList which a workflow could hook into.
The hook could be triggered post any other permissions and the linked workflow needs to result in a record of the same type requested.

So if I want to restrict which products as visible I could:
Hook into the beforeList for Products, do some arbitrary workflow that results in a composerRecords list which is then passed back to the code that passes it out to the UI.

Hook into the beforeRead for Products, do some arbitrary workflow that results in a composerRecord which is then passed back to the code for display.

Maybe the hooks can bypass the permissions.

Alternatively

Maybe a named workflow can be added to the query panels of a record list or record tab of a record panel to use the configured workflow as the datasource for the block/list

[mlohoar]

This would also enable the capability in idea 831