Jakub Zych f4969591e2 fix: read privileged membership and the admin actions through a clean statement (T-12.1-38, T-12.1-39) ...

classes.fresh chained WithContext onto a lazy NewDB session, which clones the
caller's statement with its conditions. A handle that carried a condition
made IsPrivilegedMember answer false for a member of a privileged group, so
the takeover guard would have let the request through. No caller passes such
a handle today: the admin hooks hand over the write's transaction handle.

- fresh builds the empty statement before anything is chained onto it
- IsPrivilegedMember and PrivilegedGroupIDs read through fresh

2026-10-05 14:53:41 +02:00

9.0 KiB

Raw Blame History

View Raw