Process GDPR Request (GraphQL)

Destructive

For type=delete, cascades the customer deletion. Already-approved or revoked requests → errors[].

GraphQL input quirk

The GraphQL input uses requestId (not id) — id is reserved as the resource IRI by API Platform.

Permission: customers.gdpr_requests.edit.