nsinnovations/erpnext
2
0
Fork 0
mirror of https://github.com/frappe/erpnext.git synced 2026-09-02 08:03:21 +00:00
Code Issues Packages Projects Releases Wiki Activity

fix(projects): check read permission on source in create_duplicate_project

Browse Source 
(cherry picked from commit 8c8b282a2e)
This commit is contained in:
Shllokkk
2026-08-21 13:17:47 +05:30
committed by Mergify
parent e64fddfad5
commit bd35957582
1 changed files with 4 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
erpnext/projects/doctype/project/project.py
View File

@@ -596,6 +596,10 @@ def create_duplicate_project(prev_doc, project_name):
prev_doc = json.loads(prev_doc) prev_doc = json.loads(prev_doc)
# prev_doc is caller-supplied, but the tasks below are read from the db by name
if source_name := prev_doc.get("name"):
frappe.has_permission("Project", "read", source_name, throw=True)
if project_name == prev_doc.get("name"): if project_name == prev_doc.get("name"):
frappe.throw(_("Use a name that is different from previous project name")) frappe.throw(_("Use a name that is different from previous project name"))