🐛 [firestore-send-email] Your issue title here

[hutnikau]

[READ] Step 1: Are you in the right place?

I did not find any issue on github, question on stackowerflow or info in docs related to this issue.

[REQUIRED] Step 2: Describe your configuration

• Extension name: firestore-send-email
• Extension version: 0.1.34

[REQUIRED] Step 3: Describe the problem

Steps to reproduce:

When a new record added to the collection email is not sent. In the log I see the following error:

{
  "textPayload": "Unhandled error occurred during processing: Error: 7 PERMISSION_DENIED: Missing or insufficient permissions.\n    at callErrorFromStatus (/workspace/node_modules/@grpc/grpc-js/build/src/call.js:31:19)\n    at Object.onReceiveStatus (/workspace/node_modules/@grpc/grpc-js/build/src/client.js:193:76)\n    at Object.onReceiveStatus (/workspace/node_modules/@grpc/grpc-js/build/src/client-interceptors.js:360:141)\n    at Object.onReceiveStatus (/workspace/node_modules/@grpc/grpc-js/build/src/client-interceptors.js:323:181)\n    at /workspace/node_modules/@grpc/grpc-js/build/src/resolving-call.js:129:78\n    at process.processTicksAndRejections (node:internal/process/task_queues:77:11)\nfor call at\n    at ServiceClientImpl.makeUnaryRequest (/workspace/node_modules/@grpc/grpc-js/build/src/client.js:161:32)\n    at ServiceClientImpl.<anonymous> (/workspace/node_modules/@grpc/grpc-js/build/src/make-client.js:105:19)\n    at /workspace/node_modules/@google-cloud/firestore/build/src/v1/firestore_client.js:239:29\n    at /workspace/node_modules/google-gax/build/src/normalCalls/timeout.js:44:16\n    at repeat (/workspace/node_modules/google-gax/build/src/normalCalls/retries.js:80:25)\n    at /workspace/node_modules/google-gax/build/src/normalCalls/retries.js:119:13\n    at OngoingCallPromise.call (/workspace/node_modules/google-gax/build/src/call.js:67:27)\n    at NormalApiCaller.call (/workspace/node_modules/google-gax/build/src/normalCalls/normalApiCaller.js:34:19)\n    at /workspace/node_modules/google-gax/build/src/createApiCall.js:108:30 {\n  code: 7,\n  details: 'Missing or insufficient permissions.',\n  metadata: Metadata {\n    internalRepr: Map(1) { 'x-debug-tracking-id' => [Array] },\n    options: {}\n  },\n  note: 'Exception occurred in retry method that was not classified as transient'\n}",
  "insertId": "67e1e1e9000e23a756a56943",
  "resource": {
    "type": "cloud_function",
    "labels": {
      "region": "us-central1",
      "project_id": "snapsign-dev-b33dd",
      "function_name": "ext-firestore-send-email-processQueue"
    }
  },
  "timestamp": "2025-03-24T22:51:21.926631Z",
  "severity": "INFO",
  "labels": {
    "instance_id": "00fd7d7337361e037e77202f816f9f05b8fe4fcff714979a3cd926edf00c02ef3d169e62ef4c6805376f275f4d5fec23a75e3859caef946378d58829353118eb9d9ff1c9520c531356a835c6f4d6",
    "runtime_version": "nodejs18_20250316_18_20_7_RC00",
    "execution_id": "rft08nqeweyl"
  },
  "logName": "projects/snapsign-dev-b33dd/logs/cloudfunctions.googleapis.com%2Fcloud-functions",
  "trace": "projects/snapsign-dev-b33dd/traces/a96c4092922d53435f08f43150475093",
  "receiveTimestamp": "2025-03-24T22:51:22.175441167Z"
}

Looks like the process does not have rights to write to the collection, but I do not have any rules for this collection which could block it.

Expected result

Email is sent

Actual result

Email sending fails with Error: 7 PERMISSION_DENIED: Missing or insufficient permissions error