nsinnovations/erpnext
2
0
Fork 0
mirror of https://github.com/frappe/erpnext.git synced 2026-08-31 23:33:43 +00:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #58592 from frappe/mergify/bp/version-16-hotfix/pr-58325

Browse Source 
fix(projects): check read permission on source in create_duplicate_project (backport #58325)
This commit is contained in:
Nishka Gosalia
2026-08-31 14:17:07 +05:30
committed by GitHub
parent e64fddfad5 bd35957582
commit 40fe739c9e
1 changed files with 4 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
erpnext/projects/doctype/project/project.py
View File

@@ -596,6 +596,10 @@ def create_duplicate_project(prev_doc, project_name):
prev_doc = json.loads(prev_doc)
# prev_doc is caller-supplied, but the tasks below are read from the db by name
if source_name := prev_doc.get("name"):
frappe.has_permission("Project", "read", source_name, throw=True)
if project_name == prev_doc.get("name"):
frappe.throw(_("Use a name that is different from previous project name"))