Getting permission error while creating sale return through API

GraphQL API
1

Hi Team,
We are getting permission error while creating sale returns through API.
Please see below error details any thought on this error.
}
[Post Response Data : ] => Array
(
[errors] => Array
(
[0] => Array
(
[message] => Cannot access the requested order. Permission denied
[operation] => return_create
[field] => return_create
[request_id] => 61559454f0a31bf764abdd71
[code] => 9
)

            )

        [data] => Array
            (
                [return_create] => 
            )

    )

)

2

Hi @AmitCharnalia, welcome to the community!

Permission denied will be connected to the token that you are using. Please double-check your token.

3

Hi @Theresa
Thanks for looking into this issue.
Our API Key/ token works for other endpoints, it is not a token issue.

4

Hi @AmitCharnalia,
I will be happy to take a closer look. Do you have a request ID that I can start my research with? Thanks in advance!

5

Hi @Theresa
Please find below API request and response for reference.

[Post Request URL : ] =>
[Post Request Data : ] => mutation {
return_create(
data: {
order_id: “146957”
warehouse_id: “V2FyZWhvdXNlOjczODc2”
return_reason: “Too small”,
label_type: FREE
label_cost: “0.00”
display_issue_refund: true
address: {
name: “Demo Customer”
address1: “1765 Delmar Drive”
address2: “”
city: “Laurel”
state: “New York”
zip: “11948”
country: “US”
phone: “6312524570”
}
dimensions: {
height: “1”
width: “1”
length: “1”
weight: “1”
}
shipping_carrier: “UPS”
shipping_method: “Ground”
line_items:[]
tracking_number: “”
create_label: true
partner_id: “146179”
}
) {
request_id
complexity
return {
id
legacy_id
}
}
}
[Post Response Data : ] => Array
(
[errors] => Array
(
[0] => Array
(
[message] => Cannot access the requested order. Permission denied
[operation] => return_create
[field] => return_create
[request_id] => 61559454f0a31bf764abdd71
[code] => 9
)

            )

        [data] => Array
            (
                [return_create] => 
            )

    )

)

6

Thank you for the request-id

The account_id that is in the mutation, does not have an existing order with the order_id that is in the query. The order id is the last set of numbers in the order URL.