A magic link is not a forever permission grant

Magic links prove the inbox at click time. They do not mean that user should still read, edit, or export that resource an hour later. The bug pattern A common flow: User requests access to a document