mirror of
https://github.com/discourse/discourse.git
synced 2026-08-06 13:08:40 +08:00
c2a47a6675## Summary Previously, AI bot replies checked agent access against the author of the latest post, which meant a more privileged participant could unintentionally unlock a restricted agent for a conversation; retries could also lose the original authorization context, especially after a failed response. This change keeps topic-selected agents tied to the topic creator’s permissions, records the exact authorizing user before response generation begins, and reuses that information for retries. Explicit agent mentions still use the mentioning user’s permissions, while legacy conversations and missing users fail closed rather than guessing or inheriting access from another participant. ## Source - Patch Triage: https://patch.discourse.org/patch-triage/1180 |
||
|---|---|---|
| .. | ||
| chat_streamer.rb | ||
| chat_tool_approval.rb | ||
| entry_point.rb | ||
| playground.rb | ||
| post_streamer.rb | ||
| response_http_streamer.rb | ||
| site_settings_extension.rb | ||
| stream_reply_custom_tools_session.rb | ||
| topic_agent_validator.rb | ||
