- Shipped
- 15 Novemba 2026, 05:44 UTC
- Author
- Kamo
- Commit
- d42165b
Mmiliki 2026-11-14: 'Mungu ni mungu. Hakuna kitu lazima milele kuzuia mungu kutoka kitu chochote.' - **************** ni Mungu bypass: GD (au dirisha wazi) hupita katika kila shirika. kikao wajumbe (SUDO_MEMBER_ID: Mfumo wa mtumiaji / impersonation) hupita tu ndani ya dirisha - mfumo User utambulisho ni Mungu kwa ujenzi, hivyo yake GD si ya mfanyakazi. - Kila bypass sasa inatumia, ikiwa ni pamoja na madirisha zamani tu milango: akaunti kufuta, org kuharibu / update / branding, PHI ukaguzi + PHI mpaka, mtoto-org chaguzi, mwanachama usalama (upatikanaji wa ngazi, kukuza, uongozi), mandhari backgrounds, mashine dev, MLOS mfanyabiashara, SessionRights.hasOrGod / TenantRightInterceptor, ClinicalRightsGuard, BaseLosController, majukumu ya usalama, org wizard setup, matawi subdomain, maeneo, maeneo ya masoko, mtumiaji-akaunti kuhariri sera, impersonation (same-org mlango), na haki jukwaa (PlatformRightsService -> / mtandao impersonate mlango; SystemUserEntryPolicy). - Kupita katika org mwenyeji (si PlatformOrgIdCache ya org) ni ukaguzi na GodAccessAudit: moja phi_access_log safu kwa ombi (GOD_ACCESS: < mbinu> < njia>, platform_staff), imeandikwa off-thread nyuma ya foleni bounded, kamwe kuzuia au kutupa katika mlango. - Kuondolewa kukataa kwamba kuzuia mungu: MlosConfigController SI-mkopo-upatikanaji kukataa chini mungu mode, KamoOAuthConsentService kukataa ya mikutano mungu-dirisha, RpmWriteGate kukataa ya vikao GD. Impersonated vikao kukaa kukataliwa katika tatu (attestation au ridhaa ingekuwa kubeba jina la mtu mwingine). - Vipimo updated kutoka 'GD peke yake ni kukataa' kwa 'GD peke yake hupita; si GD kukataa'; mpya GodAccessAuditTest na ****************