Entity API and RESTful Web Services: keeping field-level access consistent between Views and JSON:API output
I am designing a Drupal 10 site where a custom entity type (defined via the Entity API, with two bundles and several fielded sub-resources) must be exposed through both a Views "Entity list" display for site visitors and a JSON:API endpoint provided by the RESTful Web Services module for an external client application. The integration concern is access contr