Original PR description

The environment has an extra parameter, the _superuser mode_ flag `env.su`, that bypasses access rights checks. The behavior of method `sudo()` is now to return the recordset attached to an environment _with the same user_ but in superuser mode. By convention, the superuser (uid=1) is always in superuser mode, so the access rights short-circuit only needs to check the flag `env.su`.
```python
records_sudo = records.sudo()                   # same uid, but su=True
records = records_sudo.sudo(False)              # same uid, but su=False
records_demo = records.with_user(demo_user)     # other uid, su=False
records_su = records.with_user(SUPERUSER_ID)    # uid=1, su=True (because uid=1)
```
This feature should improve the traceability of operations (done by the real user instead of user 1).

Original PR description

…s using ponto