- Shipped
- lúc 05:16 15 tháng 11, 2026 UTC
- Author
- Kamo
- Commit
- 7ccaed0
Owner 2026-11-14: "God is god. Nothing should ever block god from anything." Every rights gate in VOIPService (the 17 controller hasRight helpers, VoipAccess, voicemail assertRight, the counts gate, shared voicemail boxes, recording access) now passes a session with GD alone; the god-mode window is no longer required. The member's own rights are checked first, so a god holding the right is not a god pass. GodPass is the one reader. A pass in a tenant org is audited by GodPassAuditor: a durable PHI audit row (ORGANIZATION, GOD_GATE=<gate>, platformStaff) for the voicemail / call-log gates, a log line for the rest. The platform org comes from a new cached PlatformOrgResolver (one query per 10 minutes, never throws); the audit never refuses god. Also: god sees the whole org's Call Log as the owner does, and may set or clear a call's Confidential marker it is not a participant of / does not own (the writer's marker audit row records it). The PHI capability boundary (org-level, refuses everyone) is unchanged.