No description
Find a file
Elton Lobo 6d1008933f
feat: add user invitation doctype & related public methods (#33308)
* feat: add user invitation doctype & related public methods

* style(user-invitation): execute formatters & add semgrep comments

* refactor(user-invitation): use `is` to compare `None` values

* fix(user-invitation): skip fetching `after_accept` for default app

* fix(user-invitation): translate email templates

* fix(user-invitaton): return pending invites from invite by email api

* refactor(user-invitation): improve code quality

* fix(user-invitation): translate all error messages

* refactor(user-invitation): improve security & readability

Improvements:
- move invite expiration check to `daily_maintenance`
- explicitly import all of the used packages
- specify methods for all security-critical endpoints
- improve error messages and give them suitable titles
- remove unnecessary utility functions
- make invitation key management secure
- translate all of the subjects of the sent emails
- use the `app_title` hook to create email titles
- commit the work done after each iteration of the background invitation
  expiry checker
- restructure code to improve readability
- use `user.reset_password` to generate the target link
- use clear long names to name identifiers
- add document states with relevant colors (User Invitation doctype)
- differ `sendmail` emails whenever possible
- send an email to the invitation creator instead of the invitee after
  the invite has expired
- remove `User Invitation Manager` role

* fix(user-invitation): use valid emails to test doctype & related code

* feat(user-invitation): support adding multiple roles

* refactor(user-invitation): mark relevant fields `set only once`

* feat(user-invitation): add `Cancelled` status

* test(user-invitation): correct broken tests

* test(user-invitation): form valid f-strings & run code formatter

* feat(user-invitation): make doctype usable from desk

* fix(user-invitation): remove delete permission from invitation doctype

* feat(user-invitation): pass user inserted info to `after_accept` hook

* refactor(user-invitation): improve custom action methods & errors

Improvements:
- trigger actions only when the invitation is in the `Pending` state
- use lowercase letters to start error messages
- handle cases where `user_invitation_hook` is not defined

* refactor(user-invitation): remove site name from email templates

* docs(user-invitation): add internal documentation

* feat(user-invitation): add 'get pending' & cancel invites apis

* fix(user-invitation): make invitation app specific

* refactor(user-invitation): avoid mixing function programming

* fix(user-invitation): make apis usable for app specific valid users

* fix(user-invitation): allow app specific invites

* feat(user-invitation): make list view & permission checks app specific

* refactor(user-invitation): convert class methods to static when possible

* feat(user-invitation): add `app_only_for` method to the doc

* fix(user-invitation): f-string syntax error in `get_permission_query_conditions`

* docs(user-invitation): add examples & improve the internal doc

* refactor: rename method name

static_ is unnecessary
only_for doesn't make sense in this context when arguments are not roles

* fix: Support POST request too

We dont follow REST semantics 100%, anything that modifies something
should ideally be doable with POST too.

* chore: cap

* fix: Avoid ignore_permissions as user arg

---------

Co-authored-by: Ankush Menat <ankush@frappe.io>
2025-07-28 16:25:53 +05:30
.github chore: update new docs domain 2025-06-18 16:10:52 +05:30
cypress refactor: seperate blogs into a seperate app (#32737) 2025-07-28 14:35:02 +05:30
esbuild fix: dont set assets_json during build (#33051) 2025-06-23 12:30:33 +05:30
frappe feat: add user invitation doctype & related public methods (#33308) 2025-07-28 16:25:53 +05:30
realtime chore: linting 2024-06-21 17:26:16 +05:30
.coveragerc ci: Add Coveragerc (#22530) 2023-10-16 18:24:16 +05:30
.editorconfig chore: ignore helix folder 2024-08-29 14:28:52 +02:00
.eslintignore fix: Miscellaneous changes (#12343) 2021-02-08 12:05:37 +05:30
.eslintrc fix: All ESLint errors 2023-07-14 15:25:48 +05:30
.git-blame-ignore-revs feat: global frappe.in_test flag (#32960) 2025-06-17 19:19:31 +05:30
.gitignore refactor: remove billing pages and navigate user to Frappe Cloud directly 2024-12-13 13:13:12 +05:30
.mergify.yml chore: disable mergify auto merges (#24825) 2024-02-09 13:59:40 +00:00
.pre-commit-config.yaml chore: bump ruff 2024-12-04 13:17:59 +05:30
.releaserc ci: better release notes generation (#19380) 2022-12-21 12:14:35 +05:30
.semgrepignore refactor!: Prefix all custom fieldnames created from Desk (#21355) 2023-06-19 18:22:36 +05:30
attributions.md build!: Drop maxmind IP database (#29213) 2025-01-17 12:03:09 +05:30
babel_extractors.csv fix: extract translatable strings from the whole repo (#27848) 2024-09-24 15:55:46 +02:00
CODE_OF_CONDUCT.md Corrected Grammar in the CODE_OF_CONDUCT.md file (#29889) 2025-01-24 20:20:02 +01:00
codecov.yml ci: update codecov.yml flags 2023-01-10 13:19:12 +05:30
CODEOWNERS chore: simple codeowners 2023-07-25 13:06:49 +05:30
commitlint.config.js chore: add depr to commit types for deprecation decisions 2024-11-13 11:20:10 +01:00
crowdin.yml ci: invert language mapping (#31879) 2025-03-24 15:03:18 +00:00
cypress.config.js test: fix cypress tests (#26012) 2024-04-17 15:26:18 +00:00
generate_bootstrap_theme.js chore: remove eslint-disable* 2023-07-14 15:41:20 +05:30
hooks.md chore!: remove dead hooks app_icon & app_color 2022-05-10 14:41:01 +05:30
LICENSE chore: Update copyright until date to 2021 2021-09-03 12:19:15 +05:30
node_utils.js feat: prepare redis subsystem for unix domain socket connections 2024-03-29 10:12:19 +01:00
package.json chore: update frappe charts 2025-07-05 17:17:25 +05:30
pyproject.toml build(deps): bump pillow (#33193) 2025-07-02 17:31:30 +05:30
README.md chore(readme): changed frappe.dev to frappe.local in local developement setup (#33104) 2025-06-26 17:55:00 +05:30
SECURITY.md Update SECURITY.md 2023-01-10 16:49:44 +05:30
sider.yml chore(sider): add sider default config for flake8 + ignore tab errors (W191) (#12587) 2021-03-16 17:07:41 +05:30
socketio.js refactor: Split socketio in multiple logical files 2023-07-01 10:53:34 +05:30
yarn.lock chore: update frappe charts 2025-07-05 17:17:25 +05:30

Frappe Framework

Low Code Web Framework For Real World Applications, In Python And JavaScript

Hero Image

Frappe Framework

Full-stack web application framework that uses Python and MariaDB on the server side and a tightly integrated client side library. Built for ERPNext.

Motivation

Started in 2005, Frappe Framework was inspired by the Semantic Web. The "big idea" behind semantic web was of a framework that not only described how information is shown (like headings, body etc), but also what it means, like name, address etc.

By creating a web framework that allowed for easy definition of metadata, it made building complex applications easy. Applications usually designed around how users interact with a system, but not based on semantics of the underlying system. Applications built on semantics end up being much more consistent and extensible. The first application built on Framework was ERPNext, a beast with more than 700 object types. Framework is not for the light hearted - it is not the first thing you might want to learn if you are beginning to learn web programming, but if you are ready to do real work, then Framework is the right tool for the job.

Key Features

  • Full-Stack Framework: Frappe covers both front-end and back-end development, allowing developers to build complete applications using a single framework.

  • Built-in Admin Interface: Provides a pre-built, customizable admin dashboard for managing application data, reducing development time and effort.

  • Role-Based Permissions: Comprehensive user and role management system to control access and permissions within the application.

  • REST API: Automatically generated RESTful API for all models, enabling easy integration with other systems and services.

  • Customizable Forms and Views: Flexible form and view customization using server-side scripting and client-side JavaScript.

  • Report Builder: Powerful reporting tool that allows users to create custom reports without writing any code.

Screenshots

List View Form View Role Permission Manager

Production Setup

Managed Hosting

You can try Frappe Cloud, a simple, user-friendly and sophisticated open-source platform to host Frappe applications with peace of mind.

It takes care of installation, setup, upgrades, monitoring, maintenance and support of your Frappe deployments. It is a fully featured developer platform with an ability to manage and control multiple Frappe deployments.

Self Hosting

Docker

Prerequisites: docker, docker-compose, git. Refer Docker Documentation for more details on Docker setup.

Run following commands:

git clone https://github.com/frappe/frappe_docker
cd frappe_docker
docker compose -f pwd.yml up -d

After a couple of minutes, site should be accessible on your localhost port: 8080. Use below default login credentials to access the site.

  • Username: Administrator
  • Password: admin

See Frappe Docker for ARM based docker setup.

Development Setup

Manual Install

The Easy Way: our install script for bench will install all dependencies (e.g. MariaDB). See https://github.com/frappe/bench for more details.

New passwords will be created for the Frappe "Administrator" user, the MariaDB root user, and the frappe user (the script displays the passwords and saves them to ~/frappe_passwords.txt).

Local

To setup the repository locally follow the steps mentioned below:

  1. Setup bench by following the Installation Steps and start the server

    bench start
    
  2. In a separate terminal window, run the following commands:

    # Create a new site
    bench new-site frappe.localhost
    
  3. Open the URL http://frappe.localhost:8000/app in your browser, you should see the app running

Learning and community

  1. Frappe School - Learn Frappe Framework and ERPNext from the various courses by the maintainers or from the community.
  2. Official documentation - Extensive documentation for Frappe Framework.
  3. Discussion Forum - Engage with community of Frappe Framework users and service providers.
  4. buildwithhussain.com - Watch Frappe Framework being used in the wild to build world-class web apps.

Contributing

  1. Issue Guidelines
  2. Report Security Vulnerabilities
  3. Pull Request Requirements
  4. Translations