Changelog
Back to All
Improved

Workspace members can view shared chat threads

3 months ago

Fetching a single chat thread no longer requires the caller to be the thread's creator or an account admin. Any user who is a member of the data product the thread belongs to can now retrieve it, so a shared chat URL is viewable by everyone with access to that workspace.

Modified Endpoint

  • GET /api/v1/accounts/{accountId}/chat-threads/{threadId}

Authorization Behavior

Access is now granted when the caller is any of the following:

  • An account admin.
  • The user who created the thread.
  • A member of the data product (workspace) the thread belongs to.

Previously, a non-admin who did not create the thread received 403 FORBIDDEN even when they had access to the same data product. Callers without access to the thread's workspace still receive 403 FORBIDDEN.

The DELETE /api/v1/accounts/{accountId}/chat-threads/{threadId} endpoint is unchanged — deletion still requires account admin or thread ownership.