mirror of
https://github.com/frappe/erpnext.git
synced 2026-09-19 19:37:56 +00:00
fix(crm): add missing permission validation on get_contract_template (#58621)
This commit is contained in:
@@ -38,6 +38,7 @@ def get_contract_template(template_name: str, doc: str | dict | Document):
|
|||||||
doc = frappe.parse_json(doc)
|
doc = frappe.parse_json(doc)
|
||||||
|
|
||||||
contract_template = frappe.get_doc("Contract Template", template_name)
|
contract_template = frappe.get_doc("Contract Template", template_name)
|
||||||
|
contract_template.check_permission()
|
||||||
contract_terms = None
|
contract_terms = None
|
||||||
|
|
||||||
if contract_template.contract_terms:
|
if contract_template.contract_terms:
|
||||||
|
|||||||
Reference in New Issue
Block a user