Per-record access
A parent opens their own child and no one else's
Access is checked against the guardian link at the moment of the request, not filtered out of a list afterwards. A parent who is sent a link to another family's child does not get that child's record.
- Checked per request
- Own children only