fix(discussion_topic): add perm. check to submit_discussion method

Users should not be able to edit someone else's replies. Forbidding it w/ this check.
This commit is contained in:
AarDG10 2026-04-28 11:18:06 +05:30
parent cc519fd4ad
commit befd7f313c

View file

@ -33,6 +33,8 @@ def submit_discussion(
):
if reply_name:
doc = frappe.get_doc("Discussion Reply", reply_name)
if doc.owner != frappe.session.user:
frappe.throw(frappe._("You can only edit your own replies."), frappe.PermissionError)
doc.reply = reply
doc.save(ignore_permissions=True)
return