- Expédié
- 15 novembre 2026 à 05:23 UTC
- Auteur
- Kamo
- Commit
- 2bd9b30
Owner 2026-11-14: "God is god." A session with GD=true now passes every tenant right and platform right MediaService checks, in every org, with no god-mode window. New GodAccess holds the cached platform-org id (moved out of AuthHelper) and, when GD passes a gate in a tenant org, writes one durable phi_access_log row per gate per request through the existing PhiAccessRecorder (ORGANIZATION / gate:<right>, platformStaff) plus a log line; it never throws. Gates: **************** (every controller using it), SupportController + WebinarController session rights lists, SupportReportingController MANAGE_SUPPORT, MeetSessionResolver (meet settings/view/start), STOMP live-session subscribe + presence support view (GD carried on the socket attributes), SystemBug MANAGE_SYSTEM_BUGS and Exec2Exec EXEC2EXEC_ACCESS platform rights, and the System User button's god input (ViewerPlatformFacts).