Check the caller's *** session rights; god bypass needs an open window

Shipped: November 15, 2026 at 12:23 AM UTC
Author: Kamo
Commit: 934fdba

Mailbox access (AccessibleMailboxService, SendableMailboxService) and the org-calendar publish right read member_rights_applied, refusing grant-all owners whom SecurityService's session allows and costing DB reads per check. MemberRights now answers the caller from the request's *** rights in memory, and anyone else or a session-less DAV login (CardDAV, CalDAV reads) from the database with grant-all honoured as SessionRightsResolver.atSignIn does (GrantAllRoles + grantAllSessionRights). The NoReply ledger accepted GD alone; it now requires an open god-mode window (GD AND godModeActive, unexpired) via SessionRights.godModeOpen.

All changes

Like what you see shipping?

All of it arrives in your workspace on its own. Start on the free plan and read this page again in a month.

Start Free Forever View Pricing