From db3e4c9cfcc80c59ae8a8c95894214d91e9c0b6a Mon Sep 17 00:00:00 2001 From: Ankush Menat Date: Mon, 16 Oct 2023 16:43:47 +0530 Subject: [PATCH] fix: Check if note has permission (#22750) --- frappe/desk/doctype/note/note.py | 4 ++++ frappe/hooks.py | 1 + 2 files changed, 5 insertions(+) diff --git a/frappe/desk/doctype/note/note.py b/frappe/desk/doctype/note/note.py index ede8ecbc5d8b..ec89e7878c72 100644 --- a/frappe/desk/doctype/note/note.py +++ b/frappe/desk/doctype/note/note.py @@ -54,3 +54,7 @@ def get_permission_query_conditions(user): user = frappe.session.user return f"(`tabNote`.owner = {frappe.db.escape(user)} or `tabNote`.public = 1)" + + +def has_permission(doc, user): + return doc.public or doc.owner == user diff --git a/frappe/hooks.py b/frappe/hooks.py index 60941df10d32..d11e4666fc2a 100644 --- a/frappe/hooks.py +++ b/frappe/hooks.py @@ -122,6 +122,7 @@ has_permission = { "Event": "frappe.desk.doctype.event.event.has_permission", "ToDo": "frappe.desk.doctype.todo.todo.has_permission", + "Note": "frappe.desk.doctype.note.note.has_permission", "User": "frappe.core.doctype.user.user.has_permission", "Dashboard Chart": "frappe.desk.doctype.dashboard_chart.dashboard_chart.has_permission", "Number Card": "frappe.desk.doctype.number_card.number_card.has_permission",