Discourse/discourse
Discourse/discourse
0
0
Fork 0
mirror of https://github.com/discourse/discourse.git synced 2026-08-06 13:08:40 +08:00
Code Packages Activity Actions
discourse/plugins/discourse-ai/app/controllers
History
Exact
Mark VanLandingham c2a47a6675
 FIX: Authorize Retried AI Bot Replies Against Topic Creator (#42325) 
## Summary

Previously, AI bot replies checked agent access against the author of
the latest post, which meant a more privileged participant could
unintentionally unlock a restricted agent for a conversation; retries
could also lose the original authorization context, especially after a
failed response.

This change keeps topic-selected agents tied to the topic creator’s
permissions, records the exact authorizing user before response
generation begins, and reuses that information for retries. Explicit
agent mentions still use the mentioning user’s permissions, while legacy
conversations and missing users fail closed rather than guessing or
inheriting access from another participant.
## Source

- Patch Triage: https://patch.discourse.org/patch-triage/1180
2026-08-05 14:28:53 -05:00
..
concerns DEV: Unify locale copy and use absolute date (#36443) 2025-12-04 13:48:38 -08:00
discourse_ai FIX: Authorize Retried AI Bot Replies Against Topic Creator (#42325) 2026-08-05 14:28:53 -05:00