Your breadcrumb trail can name folders the viewer can't open

Breadcrumbs usually walk parent_id links from the current record up to the root and render each title from a cached path or a join on folders. That walk often skips the same read check the folder page uses.

You open a file you still can read. The crumb shows "Legal hold / Acme renewal / Q3 memo.pdf". You lost access to "Acme renewal" last week. The file page works. The middle crumb already leaked the folder name.

When you build breadcrumbs for a viewer, run a read check on each ancestor. Stop at the first ancestor that fails, or replace failed titles with a generic label like "Restricted". Don't keep the real name in a greyed-out crumb.

Quick test: put a file in a private folder, grant file read but revoke folder read, open the file. If the crumb still shows the folder title, the trail skipped the check.