Overview
Data permissions let you control which data types (products, orders, customers, etc.) can be imported or exported on your store. This is useful when multiple staff members have access to the app and you want to prevent accidental changes to certain data.
By default, no restrictions are set. All data types are available for import and export.
How it works
When you configure data permissions, you choose which data types are allowed for import and which are allowed for export. Each data type has separate checkboxes for import and export, so you can allow exporting orders without allowing order imports, for example.
Once at least one permission is enabled, restrictions take effect. Only checked data types will be allowed. Anything left unchecked is blocked.
Permissions are enforced at multiple levels:
Export and import pages - Restricted data types appear as disabled and cannot be selected.
Job creation - The server blocks any attempt to create a job for a restricted data type.
Job re-runs - Re-running an existing job is blocked if the data type is now restricted.
File downloads - Downloading results from a completed job is blocked if the data type has since been restricted.
CLI access - API keys are also subject to data permissions. Even if an API key has permission to import products, the store-level data permission must also allow it.
Who can change data permissions
Only the store owner can view and change data permissions. Staff members will see the restrictions in effect but cannot modify them.
Setting up data permissions
In your Shopify admin, go to Apps and open Altera.
Navigate to Settings and click Data permissions at the bottom of the list.
Check the Export and Import boxes for each data type you want to allow.
Click Save.
Use the checkboxes in the header row to quickly select or deselect all exports or all imports at once.
To remove all restrictions, uncheck every box and save. The store returns to the default state where all data types are allowed.
Error messages
If a user or API key attempts an operation on a restricted data type, they will receive error code PERM001 explaining that the store's data permissions do not allow the operation.