Reservations this key created, newest first, paged by cursor.
bookings:read does not see the rest of the property's book — a key
that could list every reservation would hand an attacker the hotel's
whole guest database, name, email, phone and document number,
cursor-paged, if it ever leaked. Add bookings:read:all to see every
booking of the property instead; it widens a key that already reads
and is granted deliberately, not by default.

Rows carry the guest's contact details — treat the response as personal
data, not as public catalogue information.

Scope: bookings:read, plus bookings:read:all for the
property-wide view · Property-bound

What bookings:read and bookings:read:all see: Alcances y el header X-Property.