fix: validate permission before updating status (backport #53651) (#53653)

* fix: validate permission before updating status (#53651)

(cherry picked from commit 8e17c722fb)

# Conflicts:
#	erpnext/buying/doctype/purchase_order/purchase_order.py
#	erpnext/selling/doctype/sales_order/sales_order.py
#	erpnext/stock/doctype/purchase_receipt/purchase_receipt.py

* chore: resolve conflicts

---------

Co-authored-by: diptanilsaha <diptanil@frappe.io>
This commit is contained in:
mergify[bot]
2026-03-19 15:28:01 +00:00
committed by GitHub
parent ee19765c96
commit 7ebed912cf
3 changed files with 3 additions and 3 deletions

View File

@@ -1803,7 +1803,7 @@ def make_work_orders(items, sales_order, company, project=None):
@frappe.whitelist()
def update_status(status, name):
so = frappe.get_doc("Sales Order", name)
so = frappe.get_doc("Sales Order", name, check_permission="write")
so.update_status(status)