- Shipped
- 6 செப்டம்பர், 2026 அன்று 6:51 AM UTC
- Author
- Kamo
- Commit
- e977bda
MANAGE_PLATFORM_ADMINS is the right to administer the platform's access list, not a right to invent access. Without a ceiling it was silently every right at once: whoever held it could grant themselves IMPERSONATE, or grant it to somebody who would hand it straight back, and handing out rights one at a time meant nothing. Both writing endpoints now refuse to grant a right the caller does not hold themselves, naming the ones they refused so the console can say which. God is the one exemption, the same one that already governs editing a god's rights. The rule is judged on the delta rather than the submitted set. The dialog always sends the complete set it wants, so a right the target already holds is not being granted by this request even though it appears in the body — reading the whole set as a grant would freeze every administrator more privileged than the person editing them, since no ordinary change to them could be saved at all. Taking a right away stays open to anyone: revocation is de-escalation. The comparison is against the caller's resolved rights, which is what leaves an owner of the top-level organization and an open god-mode window unrestricted without a special case for either.