- Shipped
- October 19, 2026 at 1:37 AM UTC
- Author
- Kamo
- Commit
- 6ba1938
AuthHelper.hasRight / requireRight let GD (god ELIGIBILITY, no window at all) pass EVERY tenant right in every org (24 controllers: reports, social media, access rules, chat settings/policy, support, Exec2Exec, games). The System User is god-eligible by construction, so any operator entering a tenant as the System User held every MediaService right there without breaking glass. Owner rule (2026-10-18): outside the platform org god acts only through break-glass. Now **************** an open, unexpired window passes anywhere; eligibility alone only when the session's org is the platform org (findFirstByIsTopLevelTrue, cached 10 min). SystemBugController's deliberate godEligible() publish gate is untouched.