From 765a7736edaa968ca12a0e59fdf3fefba8683a43 Mon Sep 17 00:00:00 2001 From: "mergify[bot]" <37929162+mergify[bot]@users.noreply.github.com> Date: Mon, 31 Aug 2026 17:14:27 +0530 Subject: [PATCH] fix(accounts): added permission checks on `get_available_payment_schedules` (backport #58588) (#58595) Co-authored-by: Diptanil Saha --- erpnext/accounts/doctype/payment_request/payment_request.py | 1 + 1 file changed, 1 insertion(+) diff --git a/erpnext/accounts/doctype/payment_request/payment_request.py b/erpnext/accounts/doctype/payment_request/payment_request.py index d9c8ca3307d..d33bbf73627 100644 --- a/erpnext/accounts/doctype/payment_request/payment_request.py +++ b/erpnext/accounts/doctype/payment_request/payment_request.py @@ -1188,6 +1188,7 @@ def get_irequests_of_payment_request(doc: str | None = None) -> list: @frappe.whitelist() def get_available_payment_schedules(reference_doctype, reference_name): ref_doc = frappe.get_doc(reference_doctype, reference_name) + ref_doc.check_permission() if not hasattr(ref_doc, "payment_schedule") or not ref_doc.payment_schedule: return []