vassili/seitime-frappe
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions 4

Merge pull request #11452 from surajshetty3416/fix-rename-doc

Browse source 
fix(security): Remove ignore_permissions flag from API request
This commit is contained in:
mergify[bot] 2020-09-08 06:37:07 +00:00 • committed by GitHub
commit e2cf2fabd9
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
2 changed files with 2 additions and 3 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
frappe/__init__.py
View file

@ -1110,8 +1110,8 @@ def get_newargs(fn, kwargs):
if (a in fnargs) or varkw:
newargs[a] = kwargs.get(a)
if "flags" in newargs:
del newargs["flags"]
newargs.pop("ignore_permissions", None)
newargs.pop("flags", None)
return newargs

1
frappe/model/rename_doc.py
View file

@ -25,7 +25,6 @@ def update_document_title(doctype, docname, title_field=None, old_title=None, ne
return docname
@frappe.whitelist()
def rename_doc(doctype, old, new, force=False, merge=False, ignore_permissions=False, ignore_if_exists=False, show_alert=True):
"""
Renames a doc(dt, old) to doc(dt, new) and