fix: Check if note has permission (#22750)

This commit is contained in:
Ankush Menat 2023-10-16 16:43:47 +05:30 committed by GitHub
parent 3effd9e101
commit db3e4c9cfc
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
2 changed files with 5 additions and 0 deletions

View file

@ -54,3 +54,7 @@ def get_permission_query_conditions(user):
user = frappe.session.user
return f"(`tabNote`.owner = {frappe.db.escape(user)} or `tabNote`.public = 1)"
def has_permission(doc, user):
return doc.public or doc.owner == user

View file

@ -122,6 +122,7 @@ permission_query_conditions = {
has_permission = {
"Event": "frappe.desk.doctype.event.event.has_permission",
"ToDo": "frappe.desk.doctype.todo.todo.has_permission",
"Note": "frappe.desk.doctype.note.note.has_permission",
"User": "frappe.core.doctype.user.user.has_permission",
"Dashboard Chart": "frappe.desk.doctype.dashboard_chart.dashboard_chart.has_permission",
"Number Card": "frappe.desk.doctype.number_card.number_card.has_permission",