From 0e4b384af1c3e565f4ac65190b1c7235e760a8bc Mon Sep 17 00:00:00 2001 From: Diptanil Saha Date: Mon, 31 Aug 2026 13:06:01 +0530 Subject: [PATCH] fix(accounts): added permission checks on `get_available_payment_schedules` (#58588) --- erpnext/accounts/doctype/payment_request/payment_request.py | 1 + 1 file changed, 1 insertion(+) diff --git a/erpnext/accounts/doctype/payment_request/payment_request.py b/erpnext/accounts/doctype/payment_request/payment_request.py index 6b23e6ba3e0..f1060d15d7a 100644 --- a/erpnext/accounts/doctype/payment_request/payment_request.py +++ b/erpnext/accounts/doctype/payment_request/payment_request.py @@ -1359,6 +1359,7 @@ def get_irequests_of_payment_request(doc: str | None = None) -> list: @frappe.whitelist() def get_available_payment_schedules(reference_doctype: str, reference_name: str): ref_doc = frappe.get_doc(reference_doctype, reference_name) + ref_doc.check_permission() if not hasattr(ref_doc, "payment_schedule") or not ref_doc.payment_schedule: return []