[invisiblerobot]

>>> but for external access it was not clear how to limit the queries to the parts of the database the user had permission to view.

You can filter your entire db on the server to only include a subset of datoms

[synthc]

I've tried this, but found it too slow for large databases