Kibana Spaces: enforcing permission checks on cross-space saved object references
Kibana Spaces isolate saved objects by default, yet dashboards and visualizations can hold references to objects (such as data views) that live in a different space. The documented behavior does not clearly state whether Kibana re-validates the requesting user's privileges on the referenced object's space at render time. Assume a Kibana 8.x deployment using