A delegated GD session is god only with an open window

Shipped

November 15, 2026 at 5:57 AM UTC

Author

Kamo

Commit

ecab71b

SessionHelper.isGod (hasRight, rights, KbReaderScope) is now godModeActive || (GD && !delegated), delegated = a non-blank SUDO_MEMBER_ID read straight from the session: System User / impersonation sessions carry GD by construction. Same rule as shared-lib ****************