Files
erpnext/erpnext/patches
Diptanil Saha 72b72a81fa fix(project): improved access control for project users (#56675)
* fix: permission check for `get_task_html` and `get_timesheet_html`

* fix(project): enabled project access control for users without `Projects User` Role

* fix(portal): validate user permissions for project portal

* fix: patch to add docshare for the project users

* fix(patch): selecting correct column on the query

* fix(project): grant access to all the current users for new project

* fix(portal): fixed condition to display timesheets on project

* test(portal): add access control tests for project user

* fix(project): using `frappe.has_permission` instead of `self.has_permission` to validate user permissions

* fix(project): granting docshare access for every ProjectUser

Roles for an User can be removed any time or an User Permission can be added which might restrict the access to the Project.

* fix(patch): create docshare documents for non-cancelled projects and users who have no docshare documents

* test(project): removed `test_control_access_does_not_touch_users_with_real_permission`
2026-07-15 12:20:27 +05:30
..
2022-03-28 18:52:46 +05:30
2022-03-28 18:52:46 +05:30
2022-03-28 18:52:46 +05:30
2026-01-01 21:56:12 +05:30
2025-11-19 21:36:37 +05:30
2026-01-01 21:56:12 +05:30
2021-11-05 11:16:29 +05:30