changelog.d/4825-admin-reads-every-artifact.md

Rama main · réplica de lectura del repositorio original.

- **Workspace owners and admins read every artifact, audited (#4825).** A workspace OWNER or ADMIN can now read every artifact in the workspace, of every type, including another member's private, never-shared project, Word document, Sheet or Slides deck, and sees the latest version and full history instead of only the shared version. Each read of an artifact they neither own nor reach through its crew, a folder or a direct share is written to the audit log (`artifact.private_owner_accessed` for private artifacts, `artifact.workspace_admin_accessed` for other artifacts, `design.workspace_admin_accessed` for Designs as before), and nothing is shown if that entry cannot be written. Reading never grants sharing, publishing, restoring, commenting on private output or access changes. Grantees with Read or Comment still see only the shared version.