Only published merchant cases with public authorization are shown; the server filters content by permission.