Print preview can still show records the user lost access to
A lot of apps build print or PDF preview by loading the same record the detail page uses, then rendering a printer-friendly layout. The preview route often got added later, so it only checks that someone is signed in. If that person lost access (role removed, share revoked, moved out of the folder), the normal detail page returns 404. The print URL still loads the title, fields, and maybe related…
We haven't written up this one. Dev.to has the full story — the link below goes straight to it.