nsinnovations/erpnext
2
0
Fork 0
mirror of https://github.com/frappe/erpnext.git synced 2026-04-11 19:05:08 +00:00
Code Issues Packages Projects Releases Wiki Activity

fix: validate permission before updating status (backport #53651) (#53653)

Browse Source 
* fix: validate permission before updating status (#53651)

(cherry picked from commit 8e17c722fb)

# Conflicts:
#	erpnext/buying/doctype/purchase_order/purchase_order.py
#	erpnext/selling/doctype/sales_order/sales_order.py
#	erpnext/stock/doctype/purchase_receipt/purchase_receipt.py

* chore: resolve conflicts

---------

Co-authored-by: diptanilsaha <diptanil@frappe.io>
This commit is contained in:
mergify[bot]
2026-03-19 15:28:01 +00:00
committed by GitHub
parent ee19765c96
commit 7ebed912cf
3 changed files with 3 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
erpnext/buying/doctype/purchase_order/purchase_order.py
View File

@@ -889,7 +889,7 @@ def get_list_context(context=None):
@frappe.whitelist() @frappe.whitelist()
def update_status(status, name): def update_status(status, name):
po = frappe.get_lazy_doc("Purchase Order", name) po = frappe.get_lazy_doc("Purchase Order", name, check_permission="write")
po.update_status(status) po.update_status(status)
po.update_delivered_qty_in_sales_order() po.update_delivered_qty_in_sales_order()

2
erpnext/selling/doctype/sales_order/sales_order.py
View File

@@ -1803,7 +1803,7 @@ def make_work_orders(items, sales_order, company, project=None):
@frappe.whitelist() @frappe.whitelist()
def update_status(status, name): def update_status(status, name):
so = frappe.get_doc("Sales Order", name) so = frappe.get_doc("Sales Order", name, check_permission="write")
so.update_status(status) so.update_status(status)

2
erpnext/stock/doctype/purchase_receipt/purchase_receipt.py
View File

@@ -1577,7 +1577,7 @@ def make_purchase_return(source_name, target_doc=None):
@frappe.whitelist() @frappe.whitelist()
def update_purchase_receipt_status(docname, status): def update_purchase_receipt_status(docname, status):
pr = frappe.get_lazy_doc("Purchase Receipt", docname) pr = frappe.get_lazy_doc("Purchase Receipt", docname, check_permission="write")
pr.update_status(status) pr.update_status(status)