nsinnovations/erpnext
2
0
Fork 0
mirror of https://github.com/frappe/erpnext.git synced 2026-09-09 15:29:30 +00:00
Code Issues Packages Projects Releases Wiki Activity

fix(crm): check read permission on lead in add_lead_to_prospect

Browse Source 
(cherry picked from commit 02fcdc0337)

# Conflicts:
#	erpnext/crm/doctype/lead/lead.py
This commit is contained in:
Shllokkk
2026-09-02 13:50:38 +05:30
parent 3217a69fc2
commit 4dd56ec4e6
1 changed files with 5 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

7
erpnext/crm/doctype/lead/lead.py
View File

@@ -516,8 +516,11 @@ def get_lead_with_phone_number(number):
return lead return lead
@frappe.whitelist() @frappe.whitelist(methods=["POST"])
def add_lead_to_prospect(lead, prospect): def add_lead_to_prospect(lead: str, prospect: str):
if lead:
frappe.has_permission("Lead", "read", lead, throw=True)
prospect = frappe.get_doc("Prospect", prospect) prospect = frappe.get_doc("Prospect", prospect)
prospect.append("leads", {"lead": lead}) prospect.append("leads", {"lead": lead})
prospect.save() prospect.save()