vassili/seitime-frappe
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions 1

Merge pull request #38876 from ShrihariMahabal/check-perm-on-user-email-awaiting

Browse source 
fix: add perm check on user email awaiting
This commit is contained in:
Shrihari Mahabal 2026-04-24 18:12:59 +05:30 • committed by GitHub
commit 6284ad13cd
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
1 changed files with 3 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

3
frappe/core/doctype/user/user.py
View file

@ -1043,6 +1043,9 @@ def has_email_account(email: str):
@frappe.whitelist(allow_guest=False) @frappe.whitelist(allow_guest=False)
def get_email_awaiting(user: str): def get_email_awaiting(user: str):
if user != frappe.session.user:
frappe.has_permission("User", "read", doc=user, throw=True)
return frappe.get_all( return frappe.get_all(
"User Email", "User Email",
fields=["email_account", "email_id"], fields=["email_account", "email_id"],