nsinnovations/erpnext
2
0
Fork 0
mirror of https://github.com/frappe/erpnext.git synced 2026-05-27 08:54:45 +00:00
Code Issues Packages Projects Releases Wiki Activity

fix: secure bulk transaction (backport #45386) (#45426)

Browse Source 
Co-authored-by: Raffael Meyer <14891507+barredterra@users.noreply.github.com>
fix: secure bulk transaction (#45386)
This commit is contained in:
mergify[bot]
2025-01-24 17:18:50 +01:00
committed by GitHub
parent 4aa92572ef
commit f9d96726f0
8 changed files with 90 additions and 51 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
erpnext/utilities/bulk_transaction.py
View File

@@ -8,6 +8,9 @@ from frappe.utils import get_link_to_form, today
@frappe.whitelist()
def transaction_processing(data, from_doctype, to_doctype):
frappe.has_permission(from_doctype, "read", throw=True)
frappe.has_permission(to_doctype, "create", throw=True)
if isinstance(data, str):
deserialized_data = json.loads(data)
else: