- Shipped
- August 25, 2026 at 12:53 AM UTC
- Author
- Kamo
- Commit
- 435176d
MANAGE_SYSTEM_BUGS is a PlatformRightType and must stay one: the dispatch it a tenant administrator can edit their own organization's security models. Screenshots need no table — an Img row already carries an assoc type plus an assoc object id, and imgs has no CHECK constraint on assoc_id. The new association is claimed by its own StorageDomain, so the coverage test that fails the build on an uncounted upload stays satisfied. SessionPlatformFacts moves here from SecurityService: MediaService now resolves platform rights too, and two readers of godModeActive is precisely the failure that class warns about.