From 0609b0656453d1cfdd7eef2a563e94a3bba0f5b9 Mon Sep 17 00:00:00 2001 From: pandiyan Date: Thu, 27 Aug 2026 17:35:43 +0530 Subject: [PATCH] fix(selling): check sales order permission before work order creation (#58492) (cherry picked from commit a8ba713f8033ad0719861eaac0a00ac55d451c94) # Conflicts: # erpnext/selling/doctype/sales_order/mapper.py --- erpnext/selling/doctype/sales_order/sales_order.py | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/erpnext/selling/doctype/sales_order/sales_order.py b/erpnext/selling/doctype/sales_order/sales_order.py index 583486960c1..1b7b5dce5fb 100755 --- a/erpnext/selling/doctype/sales_order/sales_order.py +++ b/erpnext/selling/doctype/sales_order/sales_order.py @@ -1663,8 +1663,10 @@ def is_product_bundle(item_code): @frappe.whitelist() -def make_work_orders(items, sales_order, company, project=None): +def make_work_orders(items: str, sales_order: str, company: str, project: str | None = None): """Make Work Orders against the given Sales Order for the given `items`""" + frappe.has_permission("Sales Order", "read", sales_order, throw=True) + items = json.loads(items).get("items") out = []