nsinnovations/erpnext
2
0
Fork 0
mirror of https://github.com/frappe/erpnext.git synced 2026-08-31 23:33:43 +00:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #58593 from frappe/mergify/bp/version-15-hotfix/pr-58325

Browse Source 
fix(projects): check read permission on source in create_duplicate_project (backport #58325)
This commit is contained in:
Nishka Gosalia
2026-08-31 14:31:04 +05:30
committed by GitHub
parent c656497aac 0ea03a688b
commit 0f84b25964
1 changed files with 5 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
erpnext/projects/doctype/project/project.py
View File

@@ -590,12 +590,16 @@ def allow_to_make_project_update(project, time, frequency):
@frappe.whitelist()
def create_duplicate_project(prev_doc, project_name):
def create_duplicate_project(prev_doc: str | dict, project_name: str):
"""Create duplicate project based on the old project"""
import json
prev_doc = json.loads(prev_doc)
# prev_doc is caller-supplied, but the tasks below are read from the db by name
if source_name := prev_doc.get("name"):
frappe.has_permission("Project", "read", source_name, throw=True)
if project_name == prev_doc.get("name"):
frappe.throw(_("Use a name that is different from previous project name"))