Skip to content
Back
ResolvedDatabasesWeb

[SOLVED] When relation has data, i get 401 Unauthorized

View on Discord

Votes

0

Replies

14

Participants

Unknown

Messages

15

markOriginal post

Web Developer

I have two collections "projects" (P) and "campaigns" (C).

They are configured as a two-way relationship / many to one: P can have many C. C can have one P.

Authenticated user (the one i am testing with) has read access for the P as well as for the C items he creates (document security layer).

I am using the client SDK to query. Double checked all IDs and I nearly do the same kind of query (beside of some query params) as the appwrite backend, when retrieving P items.

When I only have P but no (related) C everything just loads fine. Once I add a related C to a P, than the query to retrieve all items fails.

I get back a 401 Unauthorized from the XHR request and appwrite container tells me "[Error] Message: The current user is not authorized to perform the requested action.".

I know from your docs, that there must be sufficient access right to all related documents in a relationship. But that kind of require is met and tripple checked.

Looking forward for some help. Already spent hours of debugging and run out of ideas. Thanks!

Drake

Would you please share the details of the collection and documents?

mark

Web Developer

Sure.

the collection configuration is attached.

The P document from the backend:

JSON
{
    "name": "abc",
    "color": "#F56565",
    "$id": "65425e3beb06b173cdbb",
    "$createdAt": "2023-11-01T14:18:35.962+00:00",
    "$updatedAt": "2023-11-01T14:18:35.962+00:00",
    "$permissions": [
      "read(\"user:653a9061c096bb18d3a4\")",
      "update(\"user:653a9061c096bb18d3a4\")",
      "delete(\"user:653a9061c096bb18d3a4\")"
    ],
    "mail_providers": [],
    "campaigns": [
      {
        "name": "sadfsf",
        "$id": "65516c7232fad43b3d2d",
        "$createdAt": "2023-11-13T00:23:14.209+00:00",
        "$updatedAt": "2023-11-13T00:23:14.209+00:00",
        "$permissions": [
          "read(\"user:653a9061c096bb18d3a4\")",
          "update(\"user:653a9061c096bb18d3a4\")",
          "delete(\"user:653a9061c096bb18d3a4\")"
        ],
        "messages": [],
        "contacts": [],
        "mail_provider": null,
        "$databaseId": "63cc623bb0baff5e8831",
        "$collectionId": "65516ada06108a04c399"
      }
    ],
    "$databaseId": "63cc623bb0baff5e8831",
    "$collectionId": "63cc6241dfb4a765a985"
  }
Drake

the collection ids don't seem to match up 🧐

mark

Web Developer

Ok. I see.
This is what i got, doing a fresh
$ appwrite init collection
on the current install and there C has ID 63cc624ae0b383e8cf56.

When I go to the backend, I see the following in my collection as in the screenshot attached

mark

Web Developer

That can be because i re-created campaigns collection while debugging.

Drake

ok...can you share a screenshot of the document security and permissions in here then?

Drake

also, can you check the output of account.get() before you call databases.listDocuments()?

mark

Web Developer

sure. this is the output of account.get():

JSON
{
    "$id": "653a9061c096bb18d3a4",
    "$createdAt": "2023-10-26T16:14:25.789+00:00",
    "$updatedAt": "2023-11-01T10:36:20.128+00:00",
    "name": "Tester Mustermann",
    "registration": "2023-10-26T16:14:25.788+00:00",
    "status": true,
    "labels": [],
    "passwordUpdate": "2023-10-26T16:14:25.788+00:00",
    "email": "test@test.de",
    "phone": "",
    "emailVerification": true,
    "phoneVerification": false,
    "prefs": {},
    "accessedAt": "2023-10-26T16:14:25.788+00:00"
}

Find the screenshots of document and collection security in the attachment.

Drake

hmm there are several other relationship attributes too...the problem could be with one of those 🧐

mark

Web Developer

Yep. I can tell that, when no C is connected to P, than everything works as expected. So the P relations should not be the problem.

When I add a related C, to problem occurs.

While when I query through the backend, to the collection overview, they can be successfully retrieved. Here is how the response from the appwrite GUI looks like:

JSON
 {
            "name": "abc",
            "color": "#F56565",
            "$id": "65425e3beb06b173cdbb",
            "$createdAt": "2023-11-01T14:18:35.962+00:00",
            "$updatedAt": "2023-11-01T14:18:35.962+00:00",
            "$permissions": [
                "read(\"user:653a9061c096bb18d3a4\")",
                "update(\"user:653a9061c096bb18d3a4\")",
                "delete(\"user:653a9061c096bb18d3a4\")"
            ],
            "mail_providers": [],
            "campaigns": [
                {
                    "name": "sadfsf",
                    "$id": "65516c7232fad43b3d2d",
                    "$createdAt": "2023-11-13T00:23:14.209+00:00",
                    "$updatedAt": "2023-11-13T00:23:14.209+00:00",
                    "$permissions": [
                        "read(\"user:653a9061c096bb18d3a4\")",
                        "update(\"user:653a9061c096bb18d3a4\")",
                        "delete(\"user:653a9061c096bb18d3a4\")"
                    ],
                    "messages": [],
                    "contacts": [],
                    "mail_provider": null,
                    "$databaseId": "63cc623bb0baff5e8831",
                    "$collectionId": "65516ada06108a04c399"
                }
            ],
            "$databaseId": "63cc623bb0baff5e8831",
            "$collectionId": "63cc6241dfb4a765a985"
        }
mark

Web Developer

The error occurs only when I query with the client SDK, as follows:

JavaScript
    const test = await databases.listDocuments(
                process.env.REACT_APP_APPWRITE_DATABASE!,
                process.env.REACT_APP_APPWRITE_COLLECTION_PROJECTS!
            );

While the environment variables pointing to the right project ids

Drake

What are the permissions on messages and contacts? And is document security enabled on those?

mark

Web Developer

💡 Ahhh... messages was the only one that had not document security enabled, now it seems to be working!!
Thank you so much for pointing my nose to the right setting 👌

Guille

[SOLVED] When relation has data, i get 401 Unauthorized

Join the discussion

Reply to this thread by joining our Discord.

Reply on Discord

Need support?_

Join DiscordGet premium support