# Shopify deprecates the PRIVATE and PUBLIC_READ metaobject admin access values

- **Provider:** Shopify
- **Endpoint:** `POST /admin/api/{version}/graphql.json`
- **Effective:** 2027-01-01
- **Severity:** low
- **Change:** enum-added
- **Status:** unverified (secondary reports only; SHAPI does not open fix PRs for it)

## What changed

The PRIVATE and PUBLIC_READ values of the MetaobjectAdminAccess enum are deprecated and are never returned by the API; they go away with API version 2027-01.

## What to do

Stop sending PRIVATE or PUBLIC_READ as a metaobject definition's admin access, and drop code that expects them back.

## Sources

- Provider notice (2026-05-20): https://shopify.dev/changelog/removing-deprecated-private-and-publicread-enums-on-metaobject-definitions

## Machine-readable

- Advisory: https://github.com/SriVarshini09/shapi-advisories/blob/main/advisories/shopify-metaobject-admin-access-private-public-read-removed.json
- OSV: https://shapi.dev/osv/shopify-metaobject-admin-access-private-public-read-removed.json