A delegated session's GD needs a god-mode window

Shipped: November 15, 2026 at 5:59 AM UTC
Author: Kamo
Commit: 20921b9

LosRightsFilter's god pass on a session is now godModeActive || (GD && !delegated), delegated being a non-blank SUDO_MEMBER_ID (System User / impersonation), matching shared-lib godPassesRightChecks. The sessionless (signed-proxy) path no longer counts the System User's is_god, since it has no window to show.

All changes

Like what you see shipping?

All of it arrives in your workspace on its own. Start on the free plan and read this page again in a month.

Start Free Forever View Pricing