From 253e7a9398ffc403747644054bc46a7cfe945915 Mon Sep 17 00:00:00 2001 From: "mergify[bot]" <37929162+mergify[bot]@users.noreply.github.com> Date: Sun, 15 Mar 2026 13:50:34 +0530 Subject: [PATCH] fix: add validation in bom creator function (backport #53364) (#53463) * fix: add validation in bom creator function (#53364) (cherry picked from commit 9c0c39381f883c18124d44d0d8bd7aad06a12316) # Conflicts: # erpnext/manufacturing/doctype/bom_creator/bom_creator.py * chore: resolve conflict --------- Co-authored-by: Mihir Kandoi Co-authored-by: diptanilsaha --- erpnext/manufacturing/doctype/bom_creator/bom_creator.py | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/erpnext/manufacturing/doctype/bom_creator/bom_creator.py b/erpnext/manufacturing/doctype/bom_creator/bom_creator.py index b8d322f9463..e071dadb998 100644 --- a/erpnext/manufacturing/doctype/bom_creator/bom_creator.py +++ b/erpnext/manufacturing/doctype/bom_creator/bom_creator.py @@ -561,7 +561,10 @@ def delete_node(**kwargs): @frappe.whitelist() -def edit_bom_creator(doctype, docname, data, parent): +def edit_bom_creator(doctype: str, docname: str, data: str | dict, parent: str): + if not frappe.has_permission(doctype=doctype, ptype="write", parent_doctype="BOM Creator"): + frappe.throw(_("You do not have permission to edit this document"), frappe.PermissionError) + if isinstance(data, str): data = frappe.parse_json(data)