Skip to content

Security: Remove system context in favor of origin #36071

@nik9000

Description

@nik9000

In #35667 we move the infrastructure for setting the origin with things like OriginSettingClient and ThreadContext#stashWithOrigin. origin is a very similar concept to the "system context" which you can access with ThreadContext#markAsSystemContext except it allows the security code to be more precise on which permissions to give which actions. That extra little bit of precision feels good to us so we'd like to migrate all uses of the system context to the origin concept and remove the system context all together.

Metadata

Metadata

Assignees

No one assigned

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions