From 9586bc763580367e3afd4a5b5448ea3e01b27d3d Mon Sep 17 00:00:00 2001 From: "mergify[bot]" <37929162+mergify[bot]@users.noreply.github.com> Date: Tue, 12 May 2026 16:30:56 +0000 Subject: [PATCH] fix: added permission validation for `deactivate_sales_person` (backport #54884) (#54885) * fix: added permission validation for `deactivate_sales_person` (#54884) (cherry picked from commit 9134db9cd3d1779f08247e8c99dc1edf8efd5734) # Conflicts: # erpnext/setup/doctype/employee/employee.py * chore: resolved conflicts --------- Co-authored-by: diptanilsaha --- erpnext/setup/doctype/employee/employee.py | 1 + 1 file changed, 1 insertion(+) diff --git a/erpnext/setup/doctype/employee/employee.py b/erpnext/setup/doctype/employee/employee.py index db4446cce77..812613bb6af 100755 --- a/erpnext/setup/doctype/employee/employee.py +++ b/erpnext/setup/doctype/employee/employee.py @@ -311,6 +311,7 @@ def is_holiday(employee, date=None, raise_exception=True, only_non_weekly=False, @frappe.whitelist() def deactivate_sales_person(status=None, employee=None): + frappe.has_permission("Employee", doc=employee, ptype="write", throw=True) if status == "Left": sales_person = frappe.db.get_value("Sales Person", {"Employee": employee}) if sales_person: