Audit log & Trash — Who can do what

Anyone in a workspace can read its audit log and see its deleted records in the Trash — both pages only ever show workspaces you belong to. Restoring and permanent deletion count as delete actions on the record's table. By default that means workspace Admins and Editors; Contributors and Viewers cannot restore or purge unless a per-table permission override grants them full access.