God eligibility alone passes CONFIGURE_SYSTEM only in the platform org; elsewhere only an open window (IoT R7 round 3)

Shipped

October 19, 2026 at 1:38 AM UTC

Author

Kamo

Commit

6a717b2

**************** let GD (eligibility, no window) pass every tenant right in every org, so the System User held CONFIGURE_SYSTEM (organization sounds) in every tenant without breaking glass. Owner rule (2026-10-18): outside the platform org god acts only through break-glass. Now **************** with the platform org from findFirstByIsTopLevelTrue. The platform-sounds path (MANAGE_PLATFORM_SOUNDS via PlatformRightsResolver) was already window-only.