From 461ea8178364917aff1440fd48b3843950d4d954 Mon Sep 17 00:00:00 2001 From: Akhil Narang Date: Mon, 23 Feb 2026 18:23:49 +0530 Subject: [PATCH] fix(ldap): sync backend and frontend restrictions (#37411) Only System Managers can use this functionality. Signed-off-by: Akhil Narang --- frappe/integrations/doctype/ldap_settings/ldap_settings.py | 2 ++ 1 file changed, 2 insertions(+) diff --git a/frappe/integrations/doctype/ldap_settings/ldap_settings.py b/frappe/integrations/doctype/ldap_settings/ldap_settings.py index bb84b7241f..e010f93b79 100644 --- a/frappe/integrations/doctype/ldap_settings/ldap_settings.py +++ b/frappe/integrations/doctype/ldap_settings/ldap_settings.py @@ -424,6 +424,8 @@ def login(): @frappe.whitelist() def reset_password(user: str, password: str, logout: int): + frappe.only_for("System Manager") + ldap: LDAPSettings = frappe.get_doc("LDAP Settings") if not ldap.enabled: frappe.throw(_("LDAP is not enabled."))