def allowed_for_superuser(session)
  $logger.debug(
    "permission check superuser username=#{session[:username]} groups=#{session[:groups]}"
  )
  if SUPERUSER != session[:username]
    $logger.debug('permission denied')
    return false
  end
  $logger.debug('permission granted for superuser')
  return true
end