From a87e2654c71441689236bebba93221a5975582f1 Mon Sep 17 00:00:00 2001 From: Shrihari Mahabal Date: Wed, 29 Apr 2026 13:55:21 +0530 Subject: [PATCH] fix: add perm check on unfollow doc --- frappe/desk/form/document_follow.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/frappe/desk/form/document_follow.py b/frappe/desk/form/document_follow.py index ba87256fa4..92e8207f07 100644 --- a/frappe/desk/form/document_follow.py +++ b/frappe/desk/form/document_follow.py @@ -77,7 +77,7 @@ def follow_document(doctype: str, doc_name: str, user: str) -> Document | bool: @frappe.whitelist() def unfollow_document(doctype: str, doc_name: str, user: str) -> bool: - if user != frappe.session.user: + if user != frappe.session.user and not frappe.has_permission("Document Follow", "write"): frappe.throw(_("You can only unfollow documents for yourself."), frappe.PermissionError) doc = frappe.get_all(