nsinnovations/erpnext
2
0
Fork 0
mirror of https://github.com/frappe/erpnext.git synced 2026-08-31 15:32:27 +00:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #58325 from Shllokkk/project-duplicate-read-permission-check

Browse Source 
fix(projects): check read permission on source in create_duplicate_project
This commit is contained in:
Nishka Gosalia
2026-08-31 11:14:40 +05:30
committed by GitHub
parent 86852d954e 4a43e5203f
commit 7af1af35cd
1 changed files with 4 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
erpnext/projects/doctype/project/project.py
View File

@@ -667,6 +667,10 @@ def create_duplicate_project(prev_doc: str | dict, project_name: str):
prev_doc = frappe.parse_json(prev_doc)
# prev_doc is caller-supplied, but the tasks below are read from the db by name
if source_name := prev_doc.get("name"):
frappe.has_permission("Project", "read", source_name, throw=True)
if project_name == prev_doc.get("name"):
frappe.throw(_("Use a name that is different from previous project name"))