A view of the records of an unpublished dataset (a type 1 view,
readable by its owner only): the models named, or ["*"] for every
model, read from metadata-service as the caller and written into the
view as its own files in the published layout under metadata/. The
dataset is named in the call, dataset_id, and authorized by the
dataset authorizer: the dataset's own organization and the caller's
role on it (reading records) decide, never the workspace the token
is active in. Refused (403) for organizations whose records stay in
their own storage. A workspace source is a view's only source.