From 4af54a7ac7a1c630bcb5016893fc438f604e8679 Mon Sep 17 00:00:00 2001 From: "mergify[bot]" <37929162+mergify[bot]@users.noreply.github.com> Date: Thu, 12 Mar 2026 09:35:19 +0000 Subject: [PATCH] fix: add validation in bom creator function (backport #53364) (#53368) * fix: add validation in bom creator function (#53364) (cherry picked from commit 9c0c39381f883c18124d44d0d8bd7aad06a12316) # Conflicts: # erpnext/manufacturing/doctype/bom_creator/bom_creator.py * chore: resolve conflicts --------- Co-authored-by: Mihir Kandoi --- erpnext/manufacturing/doctype/bom_creator/bom_creator.py | 3 +++ 1 file changed, 3 insertions(+) diff --git a/erpnext/manufacturing/doctype/bom_creator/bom_creator.py b/erpnext/manufacturing/doctype/bom_creator/bom_creator.py index b8d322f9463..e0f92c7db49 100644 --- a/erpnext/manufacturing/doctype/bom_creator/bom_creator.py +++ b/erpnext/manufacturing/doctype/bom_creator/bom_creator.py @@ -562,6 +562,9 @@ def delete_node(**kwargs): @frappe.whitelist() def edit_bom_creator(doctype, docname, data, parent): + if not frappe.has_permission(doctype=doctype, ptype="write", parent_doctype="BOM Creator"): + frappe.throw(_("You do not have permission to edit this document"), frappe.PermissionError) + if isinstance(data, str): data = frappe.parse_json(data)