Merge pull request #9994 from weseek/fix/166712-openai-threads-can-be-retrieved-regardless-of-assistants-public-permissions

fix: OpenAI threads can be retrieved regardless of assistant's public permissions

apps/app/src/features/openai/server/routes/delete-thread.ts

@@ -45,7 +45,7 @@ export const deleteThreadFactory: DeleteThreadFactory = (crowi) => {
         return res.apiv3Err(new ErrorV3('GROWI AI is not enabled'), 501);
       }
 
-      const isAiAssistantUsable = openaiService.isAiAssistantUsable(aiAssistantId, user);
+      const isAiAssistantUsable = await openaiService.isAiAssistantUsable(aiAssistantId, user);
       if (!isAiAssistantUsable) {
         return res.apiv3Err(new ErrorV3('The specified AI assistant is not usable'), 400);
       }

apps/app/src/features/openai/server/routes/get-threads.ts

@@ -43,7 +43,7 @@ export const getThreadsFactory: GetThreadsFactory = (crowi) => {
       try {
         const { aiAssistantId } = req.params;
 
-        const isAiAssistantUsable = openaiService.isAiAssistantUsable(aiAssistantId, req.user);
+        const isAiAssistantUsable = await openaiService.isAiAssistantUsable(aiAssistantId, req.user);
         if (!isAiAssistantUsable) {
           return res.apiv3Err(new ErrorV3('The specified AI assistant is not usable'), 400);
         }