Files
PaperClipAI/server
HKTITANandClaude Fable 5 717cc0f076 fix(server): allow board members the null-mapped visibility actions agents already get
permissionForAction() intentionally returns null for agent:read,
company_scope:read, issue:read, project:read, runtime:manage and
secrets:read (no explicit grant required), but the board-actor path's
!permissionKey guard denied them all with deny_unsupported_action before
any membership evaluation — board users with active company membership
saw no agents on the Dashboard (filterAgentsForActor dropped every row).

Mirror the agent actor path: board users with an active company
membership are allowed exactly those six actions
(allow_simple_company_member); without a membership they get
deny_missing_membership. agent:wake and issue:mutate keep falling
through to deny_unsupported_action — neither has a board analog today.

Fixes #7890

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
2026-06-10 22:18:37 +05:30
..