Non-owner Space members could read provider settings (mode, baseUrl, endpoint metadata) while connect/disconnect/setDefaultScope already required owner role. Align the read path with write authz. Co-authored-by: cynarAI <cynarAI@users.noreply.github.com>