From 62c4a3c020dcd58550c6e36e1ab32730b4ff4b99 Mon Sep 17 00:00:00 2001 From: Daizy Modi Date: Sun, 6 Nov 2022 19:59:59 +0530 Subject: [PATCH] fix: check permission before print or download document (#18757) --- frappe/utils/weasyprint.py | 2 ++ 1 file changed, 2 insertions(+) diff --git a/frappe/utils/weasyprint.py b/frappe/utils/weasyprint.py index ceb064a955..d670cf96f5 100644 --- a/frappe/utils/weasyprint.py +++ b/frappe/utils/weasyprint.py @@ -9,6 +9,7 @@ import frappe @frappe.whitelist() def download_pdf(doctype, name, print_format, letterhead=None): doc = frappe.get_doc(doctype, name) + doc.check_permission("print") generator = PrintFormatGenerator(print_format, doc, letterhead) pdf = generator.render_pdf() @@ -21,6 +22,7 @@ def download_pdf(doctype, name, print_format, letterhead=None): def get_html(doctype, name, print_format, letterhead=None): doc = frappe.get_doc(doctype, name) + doc.check_permission("print") generator = PrintFormatGenerator(print_format, doc, letterhead) return generator.get_html_preview()