paperclipai/paperclip · error

Only the comment author can delete comments

Error message

Only the comment author can delete comments

What it means

403 on plain comment delete. Fires when the actor does not own the comment (different agent or user than the author) and the request is a normal delete; only the comment author may delete their own comments.

Source

Thrown at server/src/routes/issues.ts:12624

      ...req.body,
      sourceRunId: req.actor.type === "agent" ? agentSourceRunId : req.body.sourceRunId ?? null,
    }, {
      identityContextId: req.actor.identityContextId,
      agentId: actor.agentId,
      userId: actor.actorType === "user" ? actor.actorId : null,
    });

    await logActivity(db, {
      companyId: issue.companyId,
      actorType: actor.actorType,
      actorId: actor.actorId,
      agentId: actor.agentId,
      runId: actor.runId,
      agentApiKeyId: actor.agentApiKeyId,
      action: "issue.thread_interaction_created",
      entityType: "issue",
      entityId: issue.id,
      details: {
        interactionId: interaction.id,
        interactionKind: interaction.kind,
        interactionStatus: interaction.status,
        continuationPolicy: interaction.continuationPolicy,
        addresseeAgentId: interaction.addresseeAgentId ?? null,
        addresseeUserId: interaction.addresseeUserId ?? null,
        requestedResolverPolicy: interaction.requestedResolverPolicy,
        effectiveResolverPolicy: interaction.effectiveResolverPolicy,
        resolverPolicyProvenance: interaction.resolverPolicyProvenance,
        effectiveResolverPolicySource: interaction.effectiveResolverPolicySource,
      },
    });

    if (
      interaction.addresseeAgentId
      && issueThreadInteractionAttentionAgentAllowed({
        agentId: interaction.addresseeAgentId,
        interaction,

View on GitHub (pinned to 01ad858492)

Solutions

  1. This is an authorization rule, not a bug: perform the action with an actor that satisfies the stated constraint (board user, the owning agent, or an in-scope resource).
  2. If access should be allowed, verify the actor's credentials/company scope and the resource's ownership before retrying.
Defensive patterns

Strategy: validation

When it happens

Trigger: Thrown at server/src/routes/issues.ts:11619 when the library encounters an invalid state.

Common situations: See trigger scenarios.


AI-assisted analysis of paperclipai/paperclip@01ad858492 (2026-08-18). Data as JSON: /api/errors/4a3989b77e6fe576. Report an issue: GitHub.