Sharing agents that have filesearch enabled with new ACLs

[mlh-csis]

First I want to acknowledge the fantastic work that has gone into the latest RC - So many valuable features have been shipped, including the above.

I am having an issue, though. Readonly sharing of agents to everyone used to also allow all users to access the documents uploaded to the agent for RAG, however now this requires "Edit"? Am I missing something or is this by design?

Owner view:

User view when shared as readonly:

User view when shared with edit rights:

I just upgraded to the RC3 and did agent migrations as per instructions - but this seems to be that same for old as well as newly created agents.

[danny-avila]

Thanks for the kind words!

Readonly sharing of agents to everyone used to also allow all users to access the documents uploaded to the agent for RAG, however now this requires "Edit"? Am I missing something or is this by design?

Yes, while "VIEW" access implicitly grants access to files if the agent uses them in any shape/way/form, "EDIT" and above is required to view the agent in the builder form, so effectively allowing to see which files are attached.

User view when shared with edit rights:

For me, the "user" UI looks different, as with "Editor" permission I can see the following:

[cloud-25683]

yes, I can confirm this view as well for agents shared with Edit permission

[danny-avila]

@mlh-csis @cloud-25683 after some feedback and review, I can see we only intended to limit file access for deletion. There was a lot of changes related to permission update, and missed this, resolving this here: #9357

[mlh-csis]

Thanks for a quick reply! I wasn't clear - with "access" I meant being able to actively use them in RAG. When the agent is shared readonly, for me it claims to not be able to not have access to search the docs attached..