diff --git a/erpnext/crm/utils.py b/erpnext/crm/utils.py
index 0652db3333a..1a0ccbba265 100644
--- a/erpnext/crm/utils.py
+++ b/erpnext/crm/utils.py
@@ -256,6 +256,9 @@ class CRMNote(Document):
 
 	@frappe.whitelist()
 	def edit_note(self, note: str, row_id: str):
+		# db_update() skips the write check that save() does in add_note/delete_note
+		self.check_permission("write")
+
 		for d in self.notes:
 			if cstr(d.name) == row_id:
 				d.note = note