From 67a595705651ba8f2806097040bf8de56509d65c Mon Sep 17 00:00:00 2001 From: Ankush Menat Date: Tue, 5 Sep 2023 18:17:55 +0530 Subject: [PATCH] fix: check for write permission if POST method --- frappe/api/v2.py | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/frappe/api/v2.py b/frappe/api/v2.py index 02ba0f6017..c08707267c 100644 --- a/frappe/api/v2.py +++ b/frappe/api/v2.py @@ -136,8 +136,7 @@ def run_doc_method(method: str, document: dict[str, Any] | str, kwargs=None): doc._original_modified = doc.modified doc.check_if_latest() - if not doc.has_permission("read"): - raise frappe.PermissionError + doc.check_permission(PERMISSION_MAP[frappe.request.method]) method_obj = getattr(doc, method) fn = getattr(method_obj, "__func__", method_obj)