KamoCRM

A god account is shown every organization, wherever it is signed in

FixSecurityService
Shipped
12 செப்டம்பர், 2026 அன்று 7:22 AM UTC
Author
Kamo
Commit
c76e250

GET /org/all-networks - the list behind /network - was gated on the SYSTEM_USER platform right alone, and platform rights resolve only in a top-level-organization session. A god account signed into anything else was refused, /network fell back to the caller's own memberships, and an organization somebody had just created was not on the page for the one account that is meant to see everything. A god (User.isGod - the account, not the god-mode window) is now shown every organization from any session. The System User is built god and stays refused by name. Only the list is lifted: entering an organization as the System User and impersonating in one keep their own gates.

All changes

Like what you see shipping?

All of it arrives in your workspace on its own. Start on the free plan and read this page again in a month.

Start Free ForeverView Pricing