From 385299903dfed8a8b2dd8744acae2349caaf8138 Mon Sep 17 00:00:00 2001 From: Anand Doshi Date: Wed, 11 Jan 2012 12:03:47 +0530 Subject: [PATCH] Escape (') in customer name in authorization control --- .../doctype/authorization_control/authorization_control.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/erpnext/setup/doctype/authorization_control/authorization_control.py b/erpnext/setup/doctype/authorization_control/authorization_control.py index 3ddcab41db..ab0ada6e58 100644 --- a/erpnext/setup/doctype/authorization_control/authorization_control.py +++ b/erpnext/setup/doctype/authorization_control/authorization_control.py @@ -88,7 +88,7 @@ class DocType(TransactionBase): if doc_obj: if doc_obj.doc.doctype == 'Receivable Voucher': customer = doc_obj.doc.customer else: customer = doc_obj.doc.customer_name - add_cond = " and master_name = '"+cstr(customer)+"'" + add_cond = " and master_name = '"+make_esc("'")(cstr(customer))+"'" if based_on == 'Itemwise Discount': if doc_obj: for t in getlist(doc_obj.doclist, doc_obj.fname):