#[SOLVED] When relation has data, i get 401 Unauthorized

14 messages · Page 1 of 1 (latest)

solid pulsar
#

I have two collections "projects" (P) and "campaigns" (C).

They are configured as a two-way relationship / many to one: P can have many C. C can have one P.

Authenticated user (the one i am testing with) has read access for the P as well as for the C items he creates (document security layer).

I am using the client SDK to query. Double checked all IDs and I nearly do the same kind of query (beside of some query params) as the appwrite backend, when retrieving P items.

When I only have P but no (related) C everything just loads fine. Once I add a related C to a P, than the query to retrieve all items fails.

I get back a 401 Unauthorized from the XHR request and appwrite container tells me "[Error] Message: The current user is not authorized to perform the requested action.".

I know from your docs, that there must be sufficient access right to all related documents in a relationship. But that kind of require is met and tripple checked.

Looking forward for some help. Already spent hours of debugging and run out of ideas. Thanks!

dreamy glade
solid pulsar
#

Sure.

the collection configuration is attached.

The P document from the backend:

{
    "name": "abc",
    "color": "#F56565",
    "$id": "65425e3beb06b173cdbb",
    "$createdAt": "2023-11-01T14:18:35.962+00:00",
    "$updatedAt": "2023-11-01T14:18:35.962+00:00",
    "$permissions": [
      "read(\"user:653a9061c096bb18d3a4\")",
      "update(\"user:653a9061c096bb18d3a4\")",
      "delete(\"user:653a9061c096bb18d3a4\")"
    ],
    "mail_providers": [],
    "campaigns": [
      {
        "name": "sadfsf",
        "$id": "65516c7232fad43b3d2d",
        "$createdAt": "2023-11-13T00:23:14.209+00:00",
        "$updatedAt": "2023-11-13T00:23:14.209+00:00",
        "$permissions": [
          "read(\"user:653a9061c096bb18d3a4\")",
          "update(\"user:653a9061c096bb18d3a4\")",
          "delete(\"user:653a9061c096bb18d3a4\")"
        ],
        "messages": [],
        "contacts": [],
        "mail_provider": null,
        "$databaseId": "63cc623bb0baff5e8831",
        "$collectionId": "65516ada06108a04c399"
      }
    ],
    "$databaseId": "63cc623bb0baff5e8831",
    "$collectionId": "63cc6241dfb4a765a985"
  }
📎 message.txt
dreamy glade
solid pulsar
#

Ok. I see.
This is what i got, doing a fresh
$ appwrite init collection
on the current install and there C has ID 63cc624ae0b383e8cf56.

When I go to the backend, I see the following in my collection as in the screenshot attached

Bildschirmfoto_2023-11-13_um_23.58.25.png
#

That can be because i re-created campaigns collection while debugging.

dreamy glade
#

also, can you check the output of account.get() before you call databases.listDocuments()?

solid pulsar
#

sure. this is the output of account.get():

{
    "$id": "653a9061c096bb18d3a4",
    "$createdAt": "2023-10-26T16:14:25.789+00:00",
    "$updatedAt": "2023-11-01T10:36:20.128+00:00",
    "name": "Tester Mustermann",
    "registration": "2023-10-26T16:14:25.788+00:00",
    "status": true,
    "labels": [],
    "passwordUpdate": "2023-10-26T16:14:25.788+00:00",
    "email": "[email protected]",
    "phone": "",
    "emailVerification": true,
    "phoneVerification": false,
    "prefs": {},
    "accessedAt": "2023-10-26T16:14:25.788+00:00"
}

Find the screenshots of document and collection security in the attachment.

Bildschirmfoto_2023-11-14_um_10.32.08.png Bildschirmfoto_2023-11-14_um_10.32.22.png Bildschirmfoto_2023-11-14_um_10.32.36.png Bildschirmfoto_2023-11-14_um_10.32.56.png
dreamy glade
solid pulsar
#

Yep. I can tell that, when no C is connected to P, than everything works as expected. So the P relations should not be the problem.

When I add a related C, to problem occurs.

While when I query through the backend, to the collection overview, they can be successfully retrieved. Here is how the response from the appwrite GUI looks like:

 {
            "name": "abc",
            "color": "#F56565",
            "$id": "65425e3beb06b173cdbb",
            "$createdAt": "2023-11-01T14:18:35.962+00:00",
            "$updatedAt": "2023-11-01T14:18:35.962+00:00",
            "$permissions": [
                "read(\"user:653a9061c096bb18d3a4\")",
                "update(\"user:653a9061c096bb18d3a4\")",
                "delete(\"user:653a9061c096bb18d3a4\")"
            ],
            "mail_providers": [],
            "campaigns": [
                {
                    "name": "sadfsf",
                    "$id": "65516c7232fad43b3d2d",
                    "$createdAt": "2023-11-13T00:23:14.209+00:00",
                    "$updatedAt": "2023-11-13T00:23:14.209+00:00",
                    "$permissions": [
                        "read(\"user:653a9061c096bb18d3a4\")",
                        "update(\"user:653a9061c096bb18d3a4\")",
                        "delete(\"user:653a9061c096bb18d3a4\")"
                    ],
                    "messages": [],
                    "contacts": [],
                    "mail_provider": null,
                    "$databaseId": "63cc623bb0baff5e8831",
                    "$collectionId": "65516ada06108a04c399"
                }
            ],
            "$databaseId": "63cc623bb0baff5e8831",
            "$collectionId": "63cc6241dfb4a765a985"
        }
#

The error occurs only when I query with the client SDK, as follows:

    const test = await databases.listDocuments(
                process.env.REACT_APP_APPWRITE_DATABASE!,
                process.env.REACT_APP_APPWRITE_COLLECTION_PROJECTS!
            );

While the environment variables pointing to the right project ids

dreamy glade
solid pulsar
#

💡 Ahhh... messages was the only one that had not document security enabled, now it seems to be working!!
Thank you so much for pointing my nose to the right setting 👌