Skip to content
Kumiko

tenant_override_requires_system_admin

What happened

Section titled “What happened”

This action isn’t allowed for another organization. Please contact an administrator if you believe this is a mistake.

Technical background

Section titled “Technical background”

AccessDeniedError: the payload carried tenantIdOverride, but the caller is no SystemAdmin. The dispatcher checks the schema-parsed payload of every write, query and stream handler before the handler runs, so only handlers that declare the field are affected.

Send the request as a SystemAdmin, or drop tenantIdOverride and act inside the caller’s own tenant. For other cross-tenant fields use mayOverrideTenant(user) in the handler.