nsinnovations/erpnext
2
0
Fork 0
mirror of https://github.com/frappe/erpnext.git synced 2026-08-19 09:28:46 +00:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #57201 from diptanilsaha/fix/perms_whitelisted_methods

Browse Source 
fix: permission checks on various whitelisted methods
This commit is contained in:
Diptanil Saha
2026-08-01 14:46:34 +05:30
committed by GitHub
parent e694d45ed4 0659bd7049
commit ceefd4add7
4 changed files with 35 additions and 15 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1
erpnext/controllers/item_variant.py
View File

@@ -346,6 +346,7 @@ def create_variant(item: str, args: dict | str, use_template_image: bool = False
def enqueue_multiple_variant_creation(item: str, args: dict | str, use_template_image: bool = False):
use_template_image = frappe.parse_json(use_template_image)
# There can be innumerable attribute combinations, enqueue
frappe.has_permission("Item", ptype="create", throw=True)
variants = frappe.parse_json(args)
variants = {key: values for key, values in variants.items() if values}
if not variants: