nsinnovations/erpnext
2
0
Fork 0
mirror of https://github.com/frappe/erpnext.git synced 2026-09-01 23:53:21 +00:00
Code Issues Packages Projects Releases Wiki Activity

fix(projects): check read permission on source in create_duplicate_project

Browse Source
This commit is contained in:
Shllokkk
2026-08-21 13:17:47 +05:30
parent 624d402143
commit 8c8b282a2e
1 changed files with 4 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
erpnext/projects/doctype/project/project.py
View File

@@ -667,6 +667,10 @@ def create_duplicate_project(prev_doc: str | dict, project_name: str):
prev_doc = frappe.parse_json(prev_doc)
# prev_doc is caller-supplied, but the tasks below are read from the db by name
if source_name := prev_doc.get("name"):
frappe.has_permission("Project", "read", source_name, throw=True)
if project_name == prev_doc.get("name"):
frappe.throw(_("Use a name that is different from previous project name"))