Bug Report: Cannot Request Protected Customer Data Access in New Dev Dashboard

Authentication & Access
,
1

I am using Shopify (Next-Gen Dev Platform). The app requires access to the FulfillmentOrder object via the Admin GraphQL API. However, I am encountering an ACCESS_DENIED error due to protected customer data restrictions, and there is no visible way to request access to this data in the new Dev Dashboard UI.

Steps to reproduce

  1. Create an app using the new Dev Dashboard (not the Partner Dashboard).

  2. Install the app on a store and grant all relevant fulfillment and order scopes (e.g., read_assigned_fulfillment_orders, read_merchant_managed_fulfillment_orders, read_third_party_fulfillment_orders).

  3. Attempt to query the fulfillmentOrders object via the Admin GraphQL API in local GraphQL explorer, e.g.:

    query FulfillmentOrdersCountQuery {
 fulfillmentOrders(
   first: 250
 ) {
   edges {
     node {
       id
     }
   }
 }

}


4. Receive the following error response:

```json
{
  "errors": [
    {
      "message": "This app is not approved to access the FulfillmentOrder object. See https://shopify.dev/apps/store/data-protection/protected-customer-data for more details.",
      "locations": [
        {
          "line": 2,
          "column": 5
        }
      ],
      "path": [
        "fulfillmentOrders"
      ],
      "extensions": {
        "code": "ACCESS_DENIED",
        "documentation": "https://shopify.dev/apps/store/data-protection/protected-customer-data"
      }
    }
  ],
  "data": null
}
  1. Search the Dev Dashboard for any UI or workflow to request access to protected customer data (as is possible in the Partner Dashboard). No such option is found.

Expected behavior

  • There should be a clear way to request access to protected customer data (such as the FulfillmentOrder object) for apps built and managed in the new Dev Dashboard, similar to the process available in the Partner Dashboard.

Actual behavior

  • All attempts to access the FulfillmentOrder object result in an ACCESS_DENIED error, even with all required scopes and correct authentication.

Questions

  • How can devs using the new Dev Dashboard request access to protected customer data? is it required ?
  • Is there a current process or workaround for this, or is it not yet supported in the Dev Dashboard Beta?
  • If not supported, is there an ETA or recommended path for apps that need this access?

Thank you for your help and clarification!

2

To request access to protected customer data (PCD) for an app created in the Dev Dashboard you will still need to use the partner dashboard. If you are in the apps list for the partner dashboard there is a separate list of Dev Dashboard apps. Once you click into one of those apps go to API Access Requests and there you can request PCD, the same as for apps created in the partner dashboard.

image
image3108×1608 389 KB

3

Amazing didn’t know that, nor saw it in docs, I thought dev dash replaced all of partner dash. Thanks!

1 Like