From 5d6bc9637599b58826177d32e53cf8f7ea73fdfb Mon Sep 17 00:00:00 2001 From: "mergify[bot]" <37929162+mergify[bot]@users.noreply.github.com> Date: Wed, 10 Jan 2024 10:45:45 +0530 Subject: [PATCH] fix: projects website list visible for guests and all logged in customers (backport #39164) (#39273) fix: projects website list visible for guests and all logged in customers (#39164) * fix: projects website list visible for guests fix: projects website list visible for guests and all logged in customers see the issue for details fixes issue #39009 * fix: remove user = frappe.session.user (cherry picked from commit eabf706f3728f0e571ea54fb825462a76984f245) Co-authored-by: 0xD0M1M0 <76812428+0xD0M1M0@users.noreply.github.com> --- erpnext/projects/doctype/project/project.py | 6 ++---- 1 file changed, 2 insertions(+), 4 deletions(-) diff --git a/erpnext/projects/doctype/project/project.py b/erpnext/projects/doctype/project/project.py index 8aad772e4b..656550aaaf 100644 --- a/erpnext/projects/doctype/project/project.py +++ b/erpnext/projects/doctype/project/project.py @@ -370,18 +370,16 @@ def get_timeline_data(doctype: str, name: str) -> dict[int, int]: def get_project_list( doctype, txt, filters, limit_start, limit_page_length=20, order_by="modified" ): - user = frappe.session.user customers, suppliers = get_customers_suppliers("Project", frappe.session.user) ignore_permissions = False - if is_website_user(): + if is_website_user() and frappe.session.user != "Guest": if not filters: filters = [] if customers: filters.append([doctype, "customer", "in", customers]) - - ignore_permissions = True + ignore_permissions = True meta = frappe.get_meta(doctype)