- Shipped
- August 25, 2026 at 2:11 PM UTC
- Author
- Kamo
- Commit
- 83ec419
A system bug crosses the tenancy line in one direction: the platform organization sees every tenant's, and no tenant sees another's. That rule lives in **************** and nowhere else, decided inside the query rather than by filtering a fetched page, and written long-hand because Optional.map treats a null result as EMPTY — as map(...).orElse(-1L) it fell through and the platform org saw nothing at all. Screenshots are Img rows under the new SYSTEM_BUG_SCREENSHOT association, validated by magic bytes rather than by the content type the browser claims. MANAGE_SYSTEM_BUGS is resolved through the shared PlatformRightsResolver and the shared SessionPlatformFacts, never off the session's tenant rights list: the tenant helper treats GD alone as a bypass, while a platform right needs an OPEN god-mode window.