POST

Order.Edit

Update an orders_for_cust row (dashboard setting/orders_for_cust with orders_for_cust_id). Alias: Order.Update.

Permissions

User must be logged in with a valid bearer token.
The user must be from the same company domain as the request Host (call the API on that account subdomain or allowed custom domain). A token from another company returns success=0, error user_not_in_company.
Returned or changed records are limited by the user permissions, team access, folder access, and account settings.

Action

Updates the requested Order record after validating permissions and input fields.

Push Service

No push is sent because this function only reads data or returns helper information.

Automation

No automation is run for this function.

Special Instructions

On a company subdomain (e.g. https://{user_domain}.bull36.com) the user must match that Host — Login and protected APIs reject another company with success=0, error user_not_in_company. On a main brand host (bull36.com, biz1.co.il, mastrocrm.com, …) the company domain gate is skipped.
Send orders_for_cust_id (aliases id, data_id). To change catalog product use product_order_id / catalog_order_id (or order_id when it is not the row id).
Custom fields merge: existing custom_fields kept, then custom_fields JSON and order-* keys overwrite.
Runs update_order automation best-effort.

Required Parameters

Name	Type	Sample	Explanation
`orders_for_cust_id` post	int	`267974`	Row id to update.

Optional Parameters

Name	Type	Sample	What it gives
`cust_id` post	int	`108545`	Customer id (defaults to existing).
`total_price` post	string	`20`	Total price.
`notes` post	string	`updated note`	Notes.
`order_status` post	int	`12`	Status id.
`custom_fields` post	json	`{"order-1731":"opt1,opt2"}`	Custom field values JSON.

Authentication

Send the bearer token returned by Login in the request header. The user must be from the same company domain as this Host — a token from another company is rejected (user_not_in_company).

Authorization: Bearer YOUR TOKEN

Sample Request

{
    "url": "\/app\/Order.Edit",
    "method": "POST",
    "headers": {
        "Authorization": "Bearer YOUR TOKEN"
    },
    "body": {
        "orders_for_cust_id": "267974",
        "total_price": "20"
    },
    "url_user": "https:\/\/{user}.bull36.com\/app\/Order.Edit",
    "url_domain": "https:\/\/{domain}\/app\/Order.Edit"
}

Endpoint

POST /app/Order.Edit
POST https://{user}.bull36.com/app/Order.Edit
POST https://{domain}/app/Order.Edit

Sample Output

{
    "success": 1,
    "orders_for_cust_id": 267974,
    "message": "Order update Successfully"
}

JavaScript Example

const token = 'YOUR TOKEN';
const body = new URLSearchParams();
body.set('orders_for_cust_id', '267974');
body.set('total_price', '20');

const res = await fetch('/app/Order.Edit', {
  method: 'POST',
  headers: { Authorization: `Bearer ${token}` },
  body
});
const data = await res.json();
console.log(data);

Error Example

{
    "success": "0",
    "message": "Request failed"
}