From 2b8e12ef44b33273c3b4f44f4353bc56e1425690 Mon Sep 17 00:00:00 2001 From: "mergify[bot]" <37929162+mergify[bot]@users.noreply.github.com> Date: Tue, 1 Sep 2026 21:30:33 +0530 Subject: [PATCH] fix(selling): check sales order permission before work order creation (backport #58492) (#58497) Co-authored-by: Pandiyan P --- erpnext/selling/doctype/sales_order/sales_order.py | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/erpnext/selling/doctype/sales_order/sales_order.py b/erpnext/selling/doctype/sales_order/sales_order.py index 2645abecb10..5183e496ace 100755 --- a/erpnext/selling/doctype/sales_order/sales_order.py +++ b/erpnext/selling/doctype/sales_order/sales_order.py @@ -1797,8 +1797,10 @@ def is_product_bundle(item_code): @frappe.whitelist() -def make_work_orders(items, sales_order, company, project=None): +def make_work_orders(items: str, sales_order: str, company: str, project: str | None = None): """Make Work Orders against the given Sales Order for the given `items`""" + frappe.has_permission("Sales Order", "read", sales_order, throw=True) + items = json.loads(items).get("items") out = []