paperclipai/paperclip · error

Company search is outside this actor's authorization boundar

Error message

Company search is outside this actor's authorization boundary

What it means

403 from the company search routes: the access decision for company_scope:read on the target company denied the actor, so company-wide search is outside its authorization boundary.

Source

Thrown at server/src/routes/issues.ts:6008

          ...(locked.queueRun && remainingIds.length === 0
            ? {
                executionRunId: null,
                executionAgentNameKey: null,
                executionLockedAt: null,
              }
            : {}),
          updatedAt: now,
        })
        .where(and(
          eq(issueRows.id, input.issue.id),
          locked.queueRun && remainingIds.length === 0
            ? eq(issueRows.executionRunId, locked.queueRun.id)
            : undefined,
        ));

      return {
        deleted,
        queue: await buildQueuedCommentQueue({
          executor: tx,
          issue: input.issue,
          activeRun: locked.activeRun,
          actor: input.actor,
          queueState: nextQueueState,
        }),
      };
    });
    // Telemetry is best-effort background work; it must not delay the
    // response with a slow lookup, so fire it and do not await it.
    if (cancelledRunToEmit) {
      void emitAgentTaskRun(db, cancelledRunToEmit);
    }
    return result;
  }

  function operatorInterruptCancelOptions(input: { issueId: string; actor: ReturnType<typeof getActorInfo> }) {
    return {

View on GitHub (pinned to 01ad858492)

Solutions

  1. This is an authorization rule, not a bug: perform the action with an actor that satisfies the stated constraint (board user, the owning agent, or an in-scope resource).
  2. If access should be allowed, verify the actor's credentials/company scope and the resource's ownership before retrying.
Defensive patterns

Strategy: validation

When it happens

Trigger: Thrown at server/src/routes/issues.ts:5708 when the library encounters an invalid state.

Common situations: See trigger scenarios.


AI-assisted analysis of paperclipai/paperclip@01ad858492 (2026-08-18). Data as JSON: /api/errors/e721ec84ca409efb. Report an issue: GitHub.