From 9c0c39381f883c18124d44d0d8bd7aad06a12316 Mon Sep 17 00:00:00 2001 From: Mihir Kandoi Date: Thu, 12 Mar 2026 12:18:54 +0530 Subject: [PATCH] fix: add validation in bom creator function (#53364) --- erpnext/manufacturing/doctype/bom_creator/bom_creator.py | 3 +++ 1 file changed, 3 insertions(+) diff --git a/erpnext/manufacturing/doctype/bom_creator/bom_creator.py b/erpnext/manufacturing/doctype/bom_creator/bom_creator.py index 29fe9aabccf..cb3042a2c86 100644 --- a/erpnext/manufacturing/doctype/bom_creator/bom_creator.py +++ b/erpnext/manufacturing/doctype/bom_creator/bom_creator.py @@ -561,6 +561,9 @@ def delete_node(**kwargs): @frappe.whitelist() def edit_bom_creator(doctype: str, docname: str, data: str | dict, parent: str): + if not frappe.has_permission(doctype=doctype, ptype="write", parent_doctype="BOM Creator"): + frappe.throw(_("You do not have permission to edit this document"), frappe.PermissionError) + if isinstance(data, str): data = frappe.parse_json(data)