From 8955f079a1917a4dd38f00db231196eb2e23feb5 Mon Sep 17 00:00:00 2001 From: Sumit Bhanushali Date: Mon, 27 Oct 2025 13:27:13 +0530 Subject: [PATCH] fix: use get_list to only fetch permitted records --- frappe/utils/data.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/frappe/utils/data.py b/frappe/utils/data.py index e37e4e0c5e..86629a4b3d 100644 --- a/frappe/utils/data.py +++ b/frappe/utils/data.py @@ -2804,7 +2804,7 @@ def attach_expanded_links(doctype: str, docs: list, fields_to_expand: list): doctype_title_maps = {} for link_doctype, values in doctype_values.items(): - records = frappe.get_all( + records = frappe.get_list( link_doctype, filters={"name": ["in", list(values)]}, fields=["*"],