From 120e62f208d1d877ea5f0ba4ba73846fdce9bfa8 Mon Sep 17 00:00:00 2001 From: Diptanil Saha Date: Tue, 1 Sep 2026 00:58:58 +0530 Subject: [PATCH] fix(crm): add missing permission validation on `get_contract_template` (#58621) --- erpnext/crm/doctype/contract_template/contract_template.py | 1 + 1 file changed, 1 insertion(+) diff --git a/erpnext/crm/doctype/contract_template/contract_template.py b/erpnext/crm/doctype/contract_template/contract_template.py index f16987f3222..dc622416919 100644 --- a/erpnext/crm/doctype/contract_template/contract_template.py +++ b/erpnext/crm/doctype/contract_template/contract_template.py @@ -38,6 +38,7 @@ def get_contract_template(template_name: str, doc: str | dict | Document): doc = frappe.parse_json(doc) contract_template = frappe.get_doc("Contract Template", template_name) + contract_template.check_permission() contract_terms = None if contract_template.contract_terms: