vassili/seitime-frappe
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions 1

refactor: explicitly set ignore_permissions for file upload

Browse source
This commit is contained in:
Shivam Mishra 2019-09-02 16:32:38 +05:30
parent 6c3b84a6b5
commit 72228946e5
1 changed files with 5 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

6
frappe/handler.py
View file

@ -141,9 +141,13 @@ def uploadfile():
@frappe.whitelist(allow_guest=True)
def upload_file():
ignore_permissions = False
if frappe.session.user == 'Guest' and \
not frappe.get_system_settings('allow_guests_to_upload_files'):
return
else:
ignore_permissions = True
files = frappe.request.files
is_private = frappe.form_dict.is_private
doctype = frappe.form_dict.doctype
@ -186,7 +190,7 @@ def upload_file():
"is_private": cint(is_private),
"content": content
})
ret.save(ignore_permissions=True)
ret.save(ignore_permissions=ignore_permissions)
return ret