Order.Delete

Permissions

• User must be logged in with a valid bearer token.
• The user must be from the same company domain as the request Host (call the API on that account subdomain or allowed custom domain). A token from another company returns success=0, error user_not_in_company.
• Returned or changed records are limited by the user permissions, team access, folder access, and account settings.

Action

• Removes the requested Order record when the user has permission.

Push Service

No push is sent because this function only reads data or returns helper information.

Automation

No automation is run for this function.

Special Instructions

• On a company subdomain (e.g. https://{user_domain}.bull36.com) the user must match that Host — Login and protected APIs reject another company with success=0, error user_not_in_company. On a main brand host (bull36.com, biz1.co.il, mastrocrm.com, …) the company domain gate is skipped.
• Only paid_status=0 rows are deleted. Paid/partly-paid rows are skipped and return only_unpaid_allowed if none qualify.
• Single: data_id / orders_for_cust_id. Bulk: data_ids / order_ids / ids (CSV or array).

Required Parameters

No body parameters are required for this function.

Optional Parameters

Authentication

Send the bearer token returned by Login in the request header. The user must be from the same company domain as this Host — a token from another company is rejected (user_not_in_company).

Authorization: Bearer YOUR TOKEN

Sample Request

{
    "url": "\/app\/Order.Delete",
    "method": "POST",
    "headers": {
        "Authorization": "Bearer YOUR TOKEN"
    },
    "body": {
        "data_id": "267974"
    },
    "url_user": "https:\/\/{user}.bull36.com\/app\/Order.Delete",
    "url_domain": "https:\/\/{domain}\/app\/Order.Delete"
}

Endpoint

POST /app/Order.Delete
POST https://{user}.bull36.com/app/Order.Delete
POST https://{domain}/app/Order.Delete

Sample Output

{
    "success": 1,
    "deleted_ids": [
        267974
    ],
    "message": "order cancel successfully"
}

JavaScript Example

const token = 'YOUR TOKEN';
const body = new URLSearchParams();
body.set('data_id', '267974');

const res = await fetch('/app/Order.Delete', {
  method: 'POST',
  headers: { Authorization: `Bearer ${token}` },
  body
});
const data = await res.json();
console.log(data);

Error Example

{
    "success": 0,
    "error": "only_unpaid_allowed",
    "message": "order cancel failed.only allow to delete unpaid orders..!"
}