A System User session's GD is not a god's — delegated sessions pass only inside a window

Shipped

November 15, 2026 at 5:13 AM UTC

Author

Kamo

Commit

2a4a3d9

The System User identity is god by construction, so every System User session carries GD even when the operator driving it holds only SYSTEM_USER. With GD-everywhere that would make every SYSTEM_USER holder god. SessionPlatformFacts gains delegated (SUDO_MEMBER_ID present); godPassesRightChecks = godModeActive || (GD && !delegated). 5-arg constructor kept.