vassili/seitime-frappe
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions 1

fix: validate ptype in file has_permission

Browse source
This commit is contained in:
Safwan Samsudeen 2026-02-23 14:45:22 +05:30
parent a2fdff9006
commit e15d4c837a
1 changed files with 4 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

6
frappe/core/doctype/file/file.py
View file

@ -887,8 +887,10 @@ def has_permission(doc, ptype=None, user=None, debug=False):
return True
if (
user != "Guest"
and ptype
and frappe.share.get_shared("File", filters=[["share_name", "=", doc.name]], rights=[ptype], user=user)
and ptype in ["read", "write", "share", "submit"]
and frappe.share.get_shared(
"File", filters=[["share_name", "=", doc.name]], rights=[ptype], user=user
)
):
return True