vassili/seitime-frappe
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions 4

Merge pull request #6398 from frappe/security-fixes

Browse source 
fix an issue with whitelisted get_list method
This commit is contained in:
Faris Ansari 2018-11-05 10:32:38 +05:30 • committed by GitHub
commit e4d83fbc97
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
1 changed files with 1 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

1
frappe/model/db_query.py
View file

@ -619,6 +619,7 @@ def get_order_by(doctype, meta):
def get_list(doctype, *args, **kwargs):
'''wrapper for DatabaseQuery'''
kwargs.pop('cmd', None)
kwargs.pop('ignore_permissions', None)
return DatabaseQuery(doctype).execute(None, *args, **kwargs)
def is_parent_only_filter(doctype, filters):