DatabasesCloud

Permissions in create_operations() Python SDK

Oct 17, 2025, 13:00Last activity 11 months ago

View on Discord

Votes

Replies

Participants

Messages

flo<3lerOriginal post

Rank 2: Process

Oct 17, 2025, 12:38

How can I set permissions for create_operations()? What even is the correct way to use permissions in Python (using SDK version 13.4.1) ? In my cloud function creating a table works and sets the correct permissions:

Plain text

            database_id,
            table_id=user_id,
            name=user_name,
            permissions=[
                Permission.read(Role.user(user_id)),
                Permission.write(Role.user(user_id)),
            ],
        )```

but subsequently using `create_operations()` creates a row but does not see any permissions:

tablesDB.create_operations(
transaction_id=transaction_id["$id"],
operations=[
{
"action": "create",
"databaseId": userDB_id,
"tableId": os.environ["POLICY_COLL_ID"],
"rowId": f"{user_id}-policy",
"data": {
"acceptedTimestamp": datetime_truncated
},
"permissions": [
Permission.read(Role.user(user_id)),
Permission.write(Role.user(user_id)),
],
},
)

Summary

The user discovered that the permissions setup that worked for `create_table()` doesn't work for `create_operations()`. They plan to switch away from `create_operations()` for now and might try a different runtime, such as Deno, where it functions as expected.

flo<3ler

Rank 2: Process

Oct 17, 2025, 12:41

I realize this may be an older syntax since I can see this example in the docs at https://appwrite.io/docs/references/cloud/server-python/tablesDB:

result = tables_db.create_table(
    database_id = '<DATABASE_ID>',
    table_id = '<TABLE_ID>',
    name = '<NAME>',
    permissions = ["read("any")"], # optional
    row_security = False, # optional
    enabled = False # optional
)

flo<3ler

Rank 2: Process

Oct 17, 2025, 13:06

I looked at https://github.com/appwrite/sdk-for-python/blob/main/appwrite/permission.py and https://github.com/appwrite/sdk-for-python/blob/main/appwrite/role.py.

The API documentations is a bit misleading since the "any" should not have any ticks. So my function now works like this:

table = tablesDB.create_table(
    database_id,
    table_id=user_id,
    name=user_name,
    permissions=[
        f"read(user:{user_id})",
        f"write(user:{user_id})",
    ],
)

but his gives me the error Invalid permissions param: Invalid permission string format: "read(user:68f23ce0001235******). Using the double quotes in string like in the documentations example leads to a formatting error, which then lead to me realizing I need to format them differently.

This now works:

tablesDB.create_operations(
  transaction_id=transaction_id["$id"],
  operations=[
      {
          "action": "create",
          "databaseId": userDB_id,
          "tableId": os.environ["POLICY_COLL_ID"],
          "rowId": f"{user_id}-policy",
          "data": {
              "acceptedTimestamp": datetime.datetime.now(
                  datetime.timezone.utc
              ).isoformat()
          },
          "permissions": [
              f'read("user:{user_id}")',
              f'write("user:{user_id}")',
          ],
      },
  ],
)

So use single quotes on the outside and double quotes on the inside!

flo<3ler

Rank 2: Process

Oct 17, 2025, 13:06

[SOLVED] Permissions in create_operations() Python SDK

flo<3ler

Rank 2: Process

Oct 17, 2025, 13:08

Permissions in create_operations() Python SDK

flo<3ler

Rank 2: Process

Oct 17, 2025, 13:10

I now realized that this only worked for the create_table() function.
Using the working string for create_table does not work for create_operations() unfortunately...

flo<3ler

Rank 2: Process

Oct 17, 2025, 13:16

Will move back away from create_operations() for now and might move the function to another runtime anyway, in Deno it works with like the documentation.

Permissions in create_operations() Python SDK

Need support?_