Overview
Edge rules — cache, WAF, redirect, rewrite, rate limit, captcha, bot routing, origin selection, fingerprinting and error pages.
Every rule type below answers the same way on access. Reading needs
domain.view, which every role has. Creating, updating, deleting,
toggling and reordering need rules.edit, which a viewer does not
have — those calls answer 403, not 404. Any of those writes against a
disabled domain answers 409 with code: domain_disabled, while the
rules stay readable. Only a domain that does not exist, or that you hold
no role on, is a 404.