nsinnovations/erpnext
2
0
Fork 0
mirror of https://github.com/frappe/erpnext.git synced 2026-08-31 07:28:04 +00:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #58324 from Shllokkk/crm-note-edit-note-permission-check

Browse Source 
fix(crm): check write permission in edit_note
This commit is contained in:
Shllokkk
2026-08-28 20:34:38 +05:30
committed by GitHub
parent 90ac7db704 eb49f51d29
commit 6d13e4a633
1 changed files with 3 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
erpnext/crm/utils.py
View File

@@ -256,6 +256,9 @@ class CRMNote(Document):
@frappe.whitelist() @frappe.whitelist()
def edit_note(self, note: str, row_id: str): def edit_note(self, note: str, row_id: str):
# db_update() skips the write check that save() does in add_note/delete_note
self.check_permission("write")
for d in self.notes: for d in self.notes:
if cstr(d.name) == row_id: if cstr(d.name) == row_id:
d.note = note d.note = note