Both public methods delegate to _search, which carries @_requires_auth, so auth is enforced at runtime. However, the decorator is absent from the public method signatures themselves, making the auth contract invisible without reading the implementation. All other public methods (get_encounter, get_individual, get_current_user, etc.) carry the decorator directly.
Both public methods delegate to _search, which carries @_requires_auth, so auth is enforced at runtime. However, the decorator is absent from the public method signatures themselves, making the auth contract invisible without reading the implementation. All other public methods (get_encounter, get_individual, get_current_user, etc.) carry the decorator directly.