paperclipai/paperclip · error
Company search is outside this actor's authorization boundar
Error message
Company search is outside this actor's authorization boundary
What it means
403 from the company search routes: the access decision for company_scope:read on the target company denied the actor, so company-wide search is outside its authorization boundary.
Source
Thrown at server/src/routes/issues.ts:6008
...(locked.queueRun && remainingIds.length === 0
? {
executionRunId: null,
executionAgentNameKey: null,
executionLockedAt: null,
}
: {}),
updatedAt: now,
})
.where(and(
eq(issueRows.id, input.issue.id),
locked.queueRun && remainingIds.length === 0
? eq(issueRows.executionRunId, locked.queueRun.id)
: undefined,
));
return {
deleted,
queue: await buildQueuedCommentQueue({
executor: tx,
issue: input.issue,
activeRun: locked.activeRun,
actor: input.actor,
queueState: nextQueueState,
}),
};
});
// Telemetry is best-effort background work; it must not delay the
// response with a slow lookup, so fire it and do not await it.
if (cancelledRunToEmit) {
void emitAgentTaskRun(db, cancelledRunToEmit);
}
return result;
}
function operatorInterruptCancelOptions(input: { issueId: string; actor: ReturnType<typeof getActorInfo> }) {
return {View on GitHub (pinned to 01ad858492)
Solutions
- This is an authorization rule, not a bug: perform the action with an actor that satisfies the stated constraint (board user, the owning agent, or an in-scope resource).
- If access should be allowed, verify the actor's credentials/company scope and the resource's ownership before retrying.
Defensive patterns
Strategy: validation
When it happens
Trigger: Thrown at server/src/routes/issues.ts:5708 when the library encounters an invalid state.
Common situations: See trigger scenarios.
AI-assisted analysis of paperclipai/paperclip@01ad858492 (2026-08-18).
Data as JSON: /api/errors/e721ec84ca409efb.
Report an issue: GitHub.