Sonador manager filter method (single endpoint-registration/permission point) — superseded by the Advanced Authorization Plugin integration

Disposition record — closed as superseded on creation (2026-07-10). This issue gives the "Sonador manager filter method" planning item a traceable resolution as part of the %Sonador Security Extensions: Access Control (SN MS1) milestone close-out.

Origin: the December 2023 planning issue oak-tree/medical-imaging/imaging-development-env#58 carried a parking-lot item to implement a filter method as part of the Sonador manager (sonador_orthanc/manager.py) — a single location for registering endpoints and assessing permissions, with every Orthanc request parsed and validated through custom Python-plugin code. An earlier incarnation of the same approach was tracked in #2 (closed) (closed 2024-03-06).

Architecture decision — superseded by the Orthanc Advanced Authorization Plugin. In February 2024 the custom filter-function approach was retired in favor of integrating with the Orthanc Advanced Authorization Plugin, which had returned to active maintenance and gained user-profile support (recorded in the February 15, 2024 note on milestone %Sonador Security Extensions: Access Control (SN MS1) and in the update on #2 (closed)). The decision delivered the filter method's actual goal — a single, consistent authorization mediation point for every Orthanc request — while eliminating a large custom parsing/validation surface: the plugin queries an external web service for each incoming request, and Sonador provides that service.

The replacement implementation (where the filter method's responsibilities now live):

Sonador integration endpoints for the plugin (token issuance, decoding, validation, and user profiles): oak-tree/medical-imaging/sonador!64.
ACL model schemas and auth endpoints in the Orthanc cloud plugin: !23 (merged); granular resource permissions: !24 (merged).
User lookup/introspection ("filter" API) within Sonador: sonador#59 (closed); Orthanc-side identity verification: #39 (closed).
Tenancy-partitioned query endpoints (the piece of the filter concept that survived, applied per-endpoint): /tools/secure-find and /dicom-web/studies filtering in #35 (closed) / !27 (merged), and /tools/bulk-content in oak-tree/medical-imaging/orthanc-sonador#38 / !40 (merged).
Overall requirements and component design: oak-tree/medical-imaging/sonador#53.

Resolution: closed — superseded by the Advanced Authorization Plugin integration delivered under SN MS1. No remaining work.