{"record":{"id":"e721ec84ca409efb","repo":"paperclipai/paperclip","slug":"company-search-is-outside-this-actor-s-authorizati","errorCode":null,"errorMessage":"Company search is outside this actor's authorization boundary","messagePattern":"Company search is outside this actor's authorization boundary","errorType":"http","errorClass":null,"httpStatus":403,"severity":"error","filePath":"server/src/routes/issues.ts","lineNumber":6008,"sourceCode":"          ...(locked.queueRun && remainingIds.length === 0\n            ? {\n                executionRunId: null,\n                executionAgentNameKey: null,\n                executionLockedAt: null,\n              }\n            : {}),\n          updatedAt: now,\n        })\n        .where(and(\n          eq(issueRows.id, input.issue.id),\n          locked.queueRun && remainingIds.length === 0\n            ? eq(issueRows.executionRunId, locked.queueRun.id)\n            : undefined,\n        ));\n\n      return {\n        deleted,\n        queue: await buildQueuedCommentQueue({\n          executor: tx,\n          issue: input.issue,\n          activeRun: locked.activeRun,\n          actor: input.actor,\n          queueState: nextQueueState,\n        }),\n      };\n    });\n    // Telemetry is best-effort background work; it must not delay the\n    // response with a slow lookup, so fire it and do not await it.\n    if (cancelledRunToEmit) {\n      void emitAgentTaskRun(db, cancelledRunToEmit);\n    }\n    return result;\n  }\n\n  function operatorInterruptCancelOptions(input: { issueId: string; actor: ReturnType<typeof getActorInfo> }) {\n    return {","sourceCodeStart":5990,"sourceCodeEnd":6026,"githubUrl":"https://github.com/paperclipai/paperclip/blob/01ad8584922b5d85292b1723cae71fa0d9b07a19/server/src/routes/issues.ts#L5990-L6026","documentation":"403 from the company search routes: the access decision for company_scope:read on the target company denied the actor, so company-wide search is outside its authorization boundary.","triggerScenarios":"Thrown at server/src/routes/issues.ts:5708 when the library encounters an invalid state.","commonSituations":"See trigger scenarios.","solutions":["This is an authorization rule, not a bug: perform the action with an actor that satisfies the stated constraint (board user, the owning agent, or an in-scope resource).","If access should be allowed, verify the actor's credentials/company scope and the resource's ownership before retrying."],"exampleFix":null,"handlingStrategy":"validation","validationCode":null,"typeGuard":null,"tryCatchPattern":null,"preventionTips":[],"tags":[],"backgroundTag":null,"analyzedSha":"01ad8584922b5d85292b1723cae71fa0d9b07a19","analyzedAt":"2026-08-18T22:49:45.177Z","contentChangedAt":"2026-08-18T22:49:45.177Z","schemaVersion":2},"datasetVersion":"2026-09-14T00:17:10.932Z"}