zeekay f7aabf72f7 SuperAdmin is the identity edge's verdict, and commerce compares no org ...

IsSuperAdmin folded the case of the home org and fell back to the owner
claim, the org of the application that minted the token, and the money
bits were granted on X-User-Owner == admin. Cloud writes X-User-Owner for
an admin-org application and an admin-org person's API key as well as for
a person, so either could mint money and edit the catalog here while
being nobody in the rest of the same process. Every gate now reads
X-User-IsAdmin, which the edge strips and writes from authz.Claims.Sudo
alone; the standalone EdgeAuth decides it with that predicate over the
verified token's signed membership set. X-User-IsAdmin no longer doubles
as the org-admin bit, which is X-User-IsOrgAdmin. No machine is
SuperAdmin. Global admin is SuperAdmin wherever it named this predicate.

2026-10-18 22:08:47 -07:00

..

datastorestore

Hanzo Commerce

2026-09-23 21:52:16 -07:00

derive_test.go

Hanzo Commerce

2026-09-23 21:52:16 -07:00

derive.go

Hanzo Commerce

2026-09-23 21:52:16 -07:00

onchain_test.go

Hanzo Commerce

2026-09-23 21:52:16 -07:00

treasury_test.go

SuperAdmin is the identity edge's verdict, and commerce compares no org

2026-10-18 22:08:47 -07:00

treasury.go

Hanzo Commerce

2026-09-23 21:52:16 -07:00