fix: check for write permission if POST method

This commit is contained in:
Ankush Menat 2023-09-05 18:17:55 +05:30
parent 824229ce0a
commit 67a5957056

View file

@ -136,8 +136,7 @@ def run_doc_method(method: str, document: dict[str, Any] | str, kwargs=None):
doc._original_modified = doc.modified
doc.check_if_latest()
if not doc.has_permission("read"):
raise frappe.PermissionError
doc.check_permission(PERMISSION_MAP[frappe.request.method])
method_obj = getattr(doc, method)
fn = getattr(method_obj, "__func__", method_obj)