fix: improved validation for address and contact

frappe/contacts/doctype/address/address.py

@@ -170,7 +170,9 @@ def get_address_display(address_dict: dict | str | None) -> str | None:
 		return
 
 	if not isinstance(address_dict, dict):
-		address_dict = frappe.db.get_value("Address", address_dict, "*", as_dict=True, cache=True) or {}
+		address = frappe.get_cached_doc("Address", address_dict)
+		address.check_permission()
+		address_dict = address.as_dict()
 
 	name, template = get_address_templates(address_dict)
 

frappe/contacts/doctype/contact/contact.py

@@ -217,6 +217,8 @@ def invite_user(contact):
 @frappe.whitelist()
 def get_contact_details(contact):
 	contact = frappe.get_doc("Contact", contact)
+	contact.check_permission()
+
 	return {
 		"contact_person": contact.get("name"),
 		"contact_display": contact.get("full_name"),