- Ya
- 15 Agosti 2026, 01:22 UTC
- Mwandishi
- kamo
- Ahadi ya
- 688dd95
Renames the System User tab to Platform Admins and turns it into what it was always standing in for: a list of the people who may operate the platform, each holding a named set of rights. Adding somebody uses the same member picker the manager field and the chat and e-sign pickers use — staff only, already-added people marked rather than hidden — so the one search that knows how to page a five-figure directory is the one used here too. Manage Rights grants and revokes; Remove takes them off the list entirely. They land holding nothing. Adding somebody and granting them capabilities are two decisions, and defaulting the second is how a person ends up with the System User because whoever added them accepted a pre-ticked box. PLATFORM_TAB_RIGHT is the single mapping of screen to right: the tab strip, the settings sub-menu, the settings landing cards and the page guard all read it, so a screen cannot be offered by one surface and refused by another. A test fails the build on a tab rendered without its check and on a menu link whose right disagrees with its tab's. The universe routes stop deciding for themselves. worldgenAuth read GD — which means "may activate god mode", not "has" — so every god-eligible operator held the universe console permanently while believing they were an ordinary user. It now asks SecurityService for MANAGE_UNIVERSE, and the session-diagnostics route behind System Debug asks for SYSTEM_DEBUG. None of this is the security. Every endpoint enforces the same right independently; hiding a screen keeps an operator off one that would 403 every request it made.