From 38f112f4acc2decd4e3ebaf9b9564a9d61ef49d0 Mon Sep 17 00:00:00 2001
From: petnd <58605206+petnd@users.noreply.github.com>
Date: Wed, 16 Apr 2025 13:02:14 +0200
Subject: [PATCH] fix: Apply permlevel for update_doc endpoint in v2 API
 (#32135)

* fix: Only Return Allowed Fields in API Response

Apply Read Permission to the returned fields of API v2
---
 frappe/api/v2.py | 1 +
 1 file changed, 1 insertion(+)

diff --git a/frappe/api/v2.py b/frappe/api/v2.py
index 7908dba210..a3b91110cd 100644
--- a/frappe/api/v2.py
+++ b/frappe/api/v2.py
@@ -110,6 +110,7 @@ def update_doc(doctype: str, name: str):
 	data.pop("flags", None)
 	doc.update(data)
 	doc.save()
+	doc.apply_fieldlevel_read_permissions()
 
 	# check for child table doctype
 	if doc.get("parenttype"):