- Ya
- 2 Septemba 2026, 23:39 UTC
- Mwandishi
- Kamo
- Ahadi ya
- eef9ee1
Shown beside Enter on every /network view for a platform administrator holding the new IMPERSONATE right. A different right from SYSTEM_USER and deliberately not implied by it: entering as the System User is a visible, separate identity a tenant can see in their own member list, while this produces a session nothing downstream can tell from that person signing in themselves. The picker is MemberPickerDialog — the same popup the /leads Agent filter opens — unchanged. It already owns the search, the paging, the keyboard handling and the way an unpickable row explains itself. What is new is its `fetcher`, which replaces the directory endpoint outright and points at the target organization's members, because the default directory is the session's own org and that is precisely the wrong list. Nobody is filtered client-side. The server marks a god account, a platform administrator or an off-boarded member unselectable with a reason, and the dialog's reason table grew to cover them: hiding those rows would leave an operator searching for a colleague plainly in the organization and getting nothing back, which reads as a broken search rather than as a refusal. The tab is claimed synchronously inside the picker's own click, before the await, and its sessionStorage cleared — the same dance handleEnter documents, for the same two reasons: a popup opened after an await is one the browser never saw anybody ask for, and a same-origin window.open CLONES this tab's storage, session id included. Also adds the icon the Platform Admins tab needs for the new right; tsc caught that, which is what RIGHT_ICON being an exhaustive Record is for.