Maybe someone can illuminate why every component but the root component must be passed to (om/factory) before it grabs onto the screen? Does (om/add-root!) implicitly do this step?

@stijn https://github.com/danielsz/system-websockets/blob/master/src/cljs/demo/core.cljs#L136

Lines 136, 137, 138 show how one could use a case statement to adjust what renders based on authenticated session or not. However, I think you were wondering about not sending data over the wire, not just not rendering/displaying it.. Hmm.. Maybe you can match every query word against a permission level... serverside parser ... :remote

@sova https://youtu.be/7lm3K8zVOdY?t=720

yes server-side definitely

@stijn excellent find. the (owns?) is still blurry to me on first glance because it looks like you need two ...(owner-rules) and (owns?) but I can sorta feel the gist.