Raises on INSUFFICIENT_PERMISSION error from NetSuite response

lib/netsuite/errors.rb

@@ -2,6 +2,7 @@ module NetSuite
   class RecordNotFound < StandardError; end
   class InitializationError < StandardError; end
   class ConfigurationError < StandardError; end
+  class PermissionError < StandardError; end
 
   # NOTE not an exception, used as a wrapped around NetSuite SOAP error
   class Error

lib/netsuite/response.rb

@@ -7,6 +7,8 @@ def initialize(attributes = {})
       @header   = attributes[:header]
       @body     = attributes[:body]
       @errors   = attributes[:errors] || []
+
+      raise_on_response_errors
     end
 
     def success!
@@ -16,5 +18,30 @@ def success!
     def success?
       @success
     end
+
+    private
+
+    def status_detail
+      @body &&
+        @body.is_a?(Hash) &&
+        @body[:status] &&
+        @body[:status][:status_detail]
+    end
+
+    def response_error_code
+      if success?
+        nil
+      else
+        status_detail &&
+          status_detail[:code]
+      end
+    end
+
+    def raise_on_response_errors
+      case response_error_code
+      when 'INSUFFICIENT_PERMISSION'
+        raise NetSuite::PermissionError, status_detail[:message]
+      end
+    end
   end
 end

spec/netsuite/response_spec.rb

@@ -14,6 +14,23 @@
       response = NetSuite::Response.new(:success => true)
       expect(response).to be_success
     end
+
+    it 'throws PermissionError when response failed to INSUFFICIENT_PERMISSION' do
+      expect {
+        NetSuite::Response.new(
+          :success => false,
+          :body => {
+            status: {
+              status_detail: {
+                :@type => 'ERROR',
+                :code => 'INSUFFICIENT_PERMISSION',
+                :message => 'Permission Violation: The subsidiary restrictions on your role prevent you from seeing this record.'
+              }
+            }
+          }
+        )
+      }.to raise_error(NetSuite::PermissionError)
+    end
   end
 
   describe '#body' do