{"record":{"id":"5ef11d014834d66d","repo":"paperclipai/paperclip","slug":"only-board-users-can-view-feedback-votes","errorCode":null,"errorMessage":"Only board users can view feedback votes","messagePattern":"Only board users can view feedback votes","errorType":"http","errorClass":null,"httpStatus":403,"severity":"error","filePath":"server/src/routes/issues.ts","lineNumber":12708,"sourceCode":"      const id = req.params.id as string;\n      const interactionId = req.params.interactionId as string;\n      const issue = await getAccessibleResource(req, res, svc.getById(id), \"Issue not found\");\n      if (!issue) return;\n      const authorizedResolution = await getIssueThreadInteractionResolutionAuthorization(\n        req,\n        res,\n        issue,\n        interactionId,\n      );\n      if (!authorizedResolution) return;\n      const { interactionSvc, current, resolutionAuthorization } = authorizedResolution;\n      if (current.kind === \"connection_intent\") {\n        throw unprocessable(\"Connection intents must be resolved through the connection intent endpoints\");\n      }\n      const suggestedTaskEffectsAuthorized = current.kind === \"suggest_tasks\"\n        ? await assertSuggestedTaskEffectsAllowed(\n            req,\n            res,\n            issue,\n            current,\n            req.body.selectedClientKeys,\n          )\n        : true;\n      if (!suggestedTaskEffectsAuthorized) return;\n\n      const actor = getActorInfo(req);\n      if (current.kind === \"request_confirmation\" && current.payload.toolAction) {\n        if (!opts.approveToolActionRequest) throw unprocessable(\"Tool review resolution is unavailable\");\n        await opts.approveToolActionRequest({ companyId: issue.companyId, issueId: issue.id, interactionId: current.id, actionRequestId: current.payload.toolAction.actionRequestId, rememberAction: req.body.rememberAction === true, actor: { agentId: actor.agentId, userId: actor.actorType === \"user\" ? actor.actorId : null } });\n        res.json(await interactionSvc.getById(current.id));\n        return;\n      }\n      if (req.body.rememberAction) throw unprocessable(\"Remembered permission is only supported for tool reviews\");\n      const { interaction, createdIssues, continuationIssue } = await interactionSvc.acceptInteraction(issue, interactionId, req.body, {\n        agentId: actor.agentId,\n        runId: actor.runId,","sourceCodeStart":12690,"sourceCodeEnd":12726,"githubUrl":"https://github.com/paperclipai/paperclip/blob/01ad8584922b5d85292b1723cae71fa0d9b07a19/server/src/routes/issues.ts#L12690-L12726","documentation":"Error \"Only board users can view feedback votes\" thrown in paperclipai/paperclip.","triggerScenarios":"Thrown at server/src/routes/issues.ts:11703 when the library encounters an invalid state.","commonSituations":"See trigger scenarios.","solutions":["This is an authorization rule, not a bug: perform the action with an actor that satisfies the stated constraint (board user, the owning agent, or an in-scope resource).","If access should be allowed, verify the actor's credentials/company scope and the resource's ownership before retrying."],"exampleFix":null,"handlingStrategy":null,"validationCode":null,"typeGuard":null,"tryCatchPattern":null,"preventionTips":[],"tags":[],"backgroundTag":null,"analyzedSha":"01ad8584922b5d85292b1723cae71fa0d9b07a19","analyzedAt":"2026-08-18T22:49:45.177Z","contentChangedAt":"2026-08-18T22:49:45.177Z","schemaVersion":2},"datasetVersion":"2026-09-14T05:17:10.506Z"}