[transactionCreate] HANDLE_PAYMENTS permissions

[benjamin-carriou]

Hi,

I'am trying to create a transaction based on a existant checkout with the transactionCreate mutation:

mutation {
  transactionCreate(
    id: "Q2hlY2tvdXQ6MTcyMzUyOTEtNWY1My00MjUyLThjYWEtNWFmMjlhZjExMjhl"
    transaction: {
      status: "Authorized"
      type: "Credit card"
      reference: "PSP-ref123"
      availableActions: [VOID, CHARGE]
      amountAuthorized: { currency: "EUR", amount: 3200 }
    }
    transactionEvent: {
      status: SUCCESS
      name: "Authorized credit card"
      reference: "PSP-ref123"
    }
  ) {
    transaction {
      id
    }
  }
}

But, it return the following error:

{
  "errors": [
    {
      "message": "You need one of the following permissions: HANDLE_PAYMENTS",
      "locations": [
        {
          "line": 2,
          "column": 3
        }
      ],
      "path": [
        "transactionCreate"
      ],
      "extensions": {
        "exception": {
          "code": "PermissionDenied",
          "stacktrace": [
            "Traceback (most recent call last):",
            "  File \"/usr/local/lib/python3.9/site-packages/graphql/execution/executor.py\", line 452, in resolve_or_error",
            "    return executor.execute(resolve_fn, source, info, **args)",
            "  File \"/usr/local/lib/python3.9/site-packages/graphql/execution/executors/sync.py\", line 16, in execute",
            "    return fn(*args, **kwargs)",
            "  File \"/app/saleor/graphql/core/mutations.py\", line 369, in mutate",
            "    raise PermissionDenied(permissions=cls._meta.permissions)",
            "saleor.core.exceptions.PermissionDenied: You need one of the following permissions: HANDLE_PAYMENTS"
          ]
        }
      }
    }
  ],
  "data": {
    "transactionCreate": null
  },
  "extensions": {
    "cost": {
      "requestedQueryCost": 0,
      "maximumAvailable": 50000
    }
  }
}

I use the admin account and when I query my permissions groups for my current account,
I get the following response where the HANDLE_PAYMENTS permission is configured:

query {me {id permissionGroups{id name} userPermissions{name code}}}

{
  "data": {
    "me": {
      "id": "VXNlcjoy",
      "permissionGroups": [
        {
          "id": "R3JvdXA6MQ==",
          "name": "Full Access"
        },
        {
          "id": "R3JvdXA6MjQ=",
          "name": "admin"
        }
      ],
      "userPermissions": [
        {
          "name": "Handle checkouts",
          "code": "HANDLE_CHECKOUTS"
        },
        {
          "name": "Handle payments",
          "code": "HANDLE_PAYMENTS"
        },
        {
          "name": "Handle taxes",
          "code": "HANDLE_TAXES"
        },
        {
          "name": "Impersonate user.",
          "code": "IMPERSONATE_USER"
        },
        {
          "name": "Manage apps",
          "code": "MANAGE_APPS"
        },
        {
          "name": "Manage channels.",
          "code": "MANAGE_CHANNELS"
        },
        {
          "name": "Manage checkouts",
          "code": "MANAGE_CHECKOUTS"
        },
        {
          "name": "Manage sales and vouchers.",
          "code": "MANAGE_DISCOUNTS"
        },
        {
          "name": "Manage gift cards.",
          "code": "MANAGE_GIFT_CARD"
        },
        {
          "name": "Manage navigation.",
          "code": "MANAGE_MENUS"
        },
        {
          "name": "Manage observability",
          "code": "MANAGE_OBSERVABILITY"
        },
        {
          "name": "Manage orders.",
          "code": "MANAGE_ORDERS"
        },
        {
          "name": "Manage page types and attributes.",
          "code": "MANAGE_PAGE_TYPES_AND_ATTRIBUTES"
        },
        {
          "name": "Manage pages.",
          "code": "MANAGE_PAGES"
        },
        {
          "name": "Manage plugins",
          "code": "MANAGE_PLUGINS"
        },
        {
          "name": "Manage product types and attributes.",
          "code": "MANAGE_PRODUCT_TYPES_AND_ATTRIBUTES"
        },
        {
          "name": "Manage products.",
          "code": "MANAGE_PRODUCTS"
        },
        {
          "name": "Manage settings.",
          "code": "MANAGE_SETTINGS"
        },
        {
          "name": "Manage shipping.",
          "code": "MANAGE_SHIPPING"
        },
        {
          "name": "Manage staff.",
          "code": "MANAGE_STAFF"
        },
        {
          "name": "Manage translations.",
          "code": "MANAGE_TRANSLATIONS"
        },
        {
          "name": "Manage customers.",
          "code": "MANAGE_USERS"
        }
      ]
    }
  },
  "extensions": {
    "cost": {
      "requestedQueryCost": 3,
      "maximumAvailable": 50000
    }
  }
}

I'am trying from the playground and I set in HTTP HEADERS the following content:

{
  "Authorization": "JWT eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsImtpZCI6IjEifQ.[...]"
}

This configuration works for another mutations (ex: productCreate, checkoutCreate, checkoutPaymentCreate, ...)

The log:

022-10-28 07:40:36,042 INFO saleor.graphql.errors.handled A query had an error [PID:23:Thread-629]
Traceback (most recent call last):
  File "/usr/local/lib/python3.9/site-packages/graphql/execution/executor.py", line 452, in resolve_or_error
    return executor.execute(resolve_fn, source, info, **args)
  File "/usr/local/lib/python3.9/site-packages/graphql/execution/executors/sync.py", line 16, in execute
    return fn(*args, **kwargs)
  File "/app/saleor/graphql/core/mutations.py", line 369, in mutate
    raise PermissionDenied(permissions=cls._meta.permissions)
saleor.core.exceptions.PermissionDenied: You need one of the following permissions: HANDLE_PAYMENTS

I use the latest version of Saleor 3.9.0-a

Any idea how what's happen ?

It is a blocker on my side :(

[benjamin-carriou]

Hi,

Any idea or help ?

[rohit3463]

Any updates here? was this resolved?
I am facing the same issue while running this

	orderCreateFromCheckout(id: $checkoutId){
		order {
			id
		}
		errors {
			code
			message
		}
	}
} 

getting the below error

	"errors": [
		{
			"message": "You need one of the following permissions: HANDLE_CHECKOUTS",
			"locations": [
				{
					"line": 2,
					"column": 2
				}
			],
			"path": [
				"orderCreateFromCheckout"
			],
			"extensions": {
				"exception": {
					"code": "PermissionDenied",
					"stacktrace": [
						"Traceback (most recent call last):",
						"  File \"/usr/local/lib/python3.9/site-packages/graphql/execution/executor.py\", line 452, in resolve_or_error",
						"    return executor.execute(resolve_fn, source, info, **args)",
						"  File \"/usr/local/lib/python3.9/site-packages/graphql/execution/executors/sync.py\", line 16, in execute",
						"    return fn(*args, **kwargs)",
						"  File \"/app/saleor/graphql/core/mutations.py\", line 513, in mutate",
						"    raise PermissionDenied(permissions=cls._meta.permissions)",
						"saleor.core.exceptions.PermissionDenied: You need one of the following permissions: HANDLE_CHECKOUTS"
					]
				}
			}
		}
	],
	"data": {
		"orderCreateFromCheckout": null
	},
	"extensions": {
		"cost": {
			"requestedQueryCost": 0,
			"maximumAvailable": 50000
		}
	}
}

checking permissions for the current user

query me {
	me {
		id
		firstName
		lastName
		email
		userPermissions {
			code
			name
		}
	}
}

getting

{
	"data": {
		"me": {
			"id": "VXNlcjoyMDUwMjQwNjE4",
			"firstName": "rohit",
			"lastName": "sethi",
			"email": "sethirohit.tech@gmail.com",
			"userPermissions": [
				{
					"code": "HANDLE_CHECKOUTS",
					"name": "Handle checkouts"
				},
				{
					"code": "HANDLE_PAYMENTS",
					"name": "Handle payments"
				},
				{
					"code": "HANDLE_TAXES",
					"name": "Handle taxes"
				},
				{
					"code": "IMPERSONATE_USER",
					"name": "Impersonate user."
				},
				{
					"code": "MANAGE_APPS",
					"name": "Manage apps"
				},
				{
					"code": "MANAGE_CHANNELS",
					"name": "Manage channels."
				},
				{
					"code": "MANAGE_CHECKOUTS",
					"name": "Manage checkouts"
				},
				{
					"code": "MANAGE_DISCOUNTS",
					"name": "Manage sales and vouchers."
				},
				{
					"code": "MANAGE_GIFT_CARD",
					"name": "Manage gift cards."
				},
				{
					"code": "MANAGE_MENUS",
					"name": "Manage navigation."
				},
				{
					"code": "MANAGE_OBSERVABILITY",
					"name": "Manage observability"
				},
				{
					"code": "MANAGE_ORDERS",
					"name": "Manage orders."
				},
				{
					"code": "MANAGE_PAGE_TYPES_AND_ATTRIBUTES",
					"name": "Manage page types and attributes."
				},
				{
					"code": "MANAGE_PAGES",
					"name": "Manage pages."
				},
				{
					"code": "MANAGE_PLUGINS",
					"name": "Manage plugins"
				},
				{
					"code": "MANAGE_PRODUCT_TYPES_AND_ATTRIBUTES",
					"name": "Manage product types and attributes."
				},
				{
					"code": "MANAGE_PRODUCTS",
					"name": "Manage products."
				},
				{
					"code": "MANAGE_SETTINGS",
					"name": "Manage settings."
				},
				{
					"code": "MANAGE_SHIPPING",
					"name": "Manage shipping."
				},
				{
					"code": "MANAGE_STAFF",
					"name": "Manage staff."
				},
				{
					"code": "MANAGE_TAXES",
					"name": "Manage taxes"
				},
				{
					"code": "MANAGE_TRANSLATIONS",
					"name": "Manage translations."
				},
				{
					"code": "MANAGE_USERS",
					"name": "Manage customers."
				}
			]
		}
	},
	"extensions": {
		"cost": {
			"requestedQueryCost": 2,
			"maximumAvailable": 50000
		}
	}
}

[jor23dan]

how to assign query user in graphql?