- Shipped
- November 15, 2026 at 5:23 AM UTC
- Author
- Kamo
- Commit
- 2bd9b30
Owner 2026-11-14: "God is god." A session with GD=true now passes every tenant right and platform right MediaService checks, in every org, with no god-mode window. New GodAccess holds the cached platform-org id (moved out of AuthHelper) and, when GD passes a gate in a tenant org, writes one durable phi_access_log row per gate per request through the existing PhiAccessRecorder (ORGANIZATION / gate:<right>, platformStaff) plus a log line; it never throws. Gates: **************** (every controller using it), SupportController + WebinarController session rights lists, SupportReportingController MANAGE_SUPPORT, MeetSessionResolver (meet settings/view/start), STOMP live-session subscribe + presence support view (GD carried on the socket attributes), SystemBug MANAGE_SYSTEM_BUGS and Exec2Exec EXEC2EXEC_ACCESS platform rights, and the System User button's god input (ViewerPlatformFacts).