nsinnovations/erpnext
2
0
Fork 0
mirror of https://github.com/frappe/erpnext.git synced 2026-09-09 15:29:30 +00:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #58691 from frappe/mergify/bp/version-16-hotfix/pr-58684

Browse Source 
fix(crm): check read permission on lead in add_lead_to_prospect (backport #58684)
This commit is contained in:
Shllokkk
2026-09-04 16:45:00 +05:30
committed by GitHub
parent 82392fa747 2cc1a51d9a
commit d48bb40969
1 changed files with 5 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

7
erpnext/crm/doctype/lead/lead.py
View File

@@ -526,8 +526,11 @@ def get_lead_with_phone_number(number):
return lead
@frappe.whitelist()
def add_lead_to_prospect(lead, prospect):
@frappe.whitelist(methods=["POST"])
def add_lead_to_prospect(lead: str, prospect: str):
if lead:
frappe.has_permission("Lead", "read", lead, throw=True)
prospect = frappe.get_doc("Prospect", prospect)
prospect.append("leads", {"lead": lead})
prospect.save()