From d1b615b8511bc894f45001498d1a15175e210033 Mon Sep 17 00:00:00 2001 From: "mergify[bot]" <37929162+mergify[bot]@users.noreply.github.com> Date: Mon, 31 Aug 2026 19:49:07 +0000 Subject: [PATCH] fix(crm): add missing permission validation on `get_contract_template` (backport #58621) (#58622) Co-authored-by: Diptanil Saha --- erpnext/crm/doctype/contract_template/contract_template.py | 1 + 1 file changed, 1 insertion(+) diff --git a/erpnext/crm/doctype/contract_template/contract_template.py b/erpnext/crm/doctype/contract_template/contract_template.py index d0bf738d79d..587e2ce4bcd 100644 --- a/erpnext/crm/doctype/contract_template/contract_template.py +++ b/erpnext/crm/doctype/contract_template/contract_template.py @@ -39,6 +39,7 @@ def get_contract_template(template_name, doc): doc = json.loads(doc) contract_template = frappe.get_doc("Contract Template", template_name) + contract_template.check_permission() contract_terms = None if contract_template.contract_terms: