From 8d898a4ebc78c30818ccd7e494ab47883fbd90c4 Mon Sep 17 00:00:00 2001 From: AarDG10 Date: Wed, 1 Apr 2026 17:32:35 +0530 Subject: [PATCH] fix: add perm check to get_values_for_link_and_dynamic_link_fields --- frappe/api/v1.py | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/frappe/api/v1.py b/frappe/api/v1.py index 523c0d0f54..75bb9a7f3b 100644 --- a/frappe/api/v1.py +++ b/frappe/api/v1.py @@ -97,7 +97,8 @@ def get_values_for_link_and_dynamic_link_fields(doc_dict): doctype = field.options if field.fieldtype == "Link" else doc_dict.get(field.options) - link_doc = frappe.get_doc(doctype, doc_fieldvalue) + link_doc = frappe.get_doc(doctype, doc_fieldvalue, check_permission="read") + link_doc.apply_fieldlevel_read_permissions() doc_dict.update({field.fieldname: link_doc})