From 89844f803d6dbb11e1144b3d9002cb0303afa374 Mon Sep 17 00:00:00 2001
From: Anand Doshi <anand@erpnext.com>
Date: Wed, 13 Nov 2013 15:03:32 +0530
Subject: [PATCH] [minor] check permission for editable web page

---
 .../item_group/templates/generators/item_group.html   |  8 +++++---
 stock/doctype/item/templates/generators/item.html     | 11 ++++++-----
 2 files changed, 11 insertions(+), 8 deletions(-)

diff --git a/setup/doctype/item_group/templates/generators/item_group.html b/setup/doctype/item_group/templates/generators/item_group.html
index 459c9896c4..ba32d5c95a 100644
--- a/setup/doctype/item_group/templates/generators/item_group.html
+++ b/setup/doctype/item_group/templates/generators/item_group.html
@@ -41,10 +41,12 @@
 <script>
 $(function() {
 	if(window.logged_in && getCookie("system_user")==="yes") {
-		wn.require("lib/js/wn/website/editable.js");
-		wn.make_editable($('[itemprop="description"]'), "Item Group", "{{ name }}", "description");
+		wn.has_permission("Item Group", "{{ name }}", "write", function(r) {
+			wn.require("lib/js/wn/website/editable.js");
+			wn.make_editable($('[itemprop="description"]'), "Item Group", "{{ name }}", "description");
+		});
 	}
-})
+});
 </script>
 
 {% endblock %}
\ No newline at end of file
diff --git a/stock/doctype/item/templates/generators/item.html b/stock/doctype/item/templates/generators/item.html
index eab1b73a54..a89eada41b 100644
--- a/stock/doctype/item/templates/generators/item.html
+++ b/stock/doctype/item/templates/generators/item.html
@@ -3,14 +3,15 @@
 {% block javascript %}
 <script>
 	{% include "app/stock/doctype/item/templates/includes/product_page.js" %}
-
+	
 	$(function() {
 		if(window.logged_in && getCookie("system_user")==="yes") {
-			wn.require("lib/js/wn/website/editable.js");
-			wn.make_editable($('[itemprop="description"]'), "Item", "{{ name }}", "web_long_description");
+			wn.has_permission("Item", "{{ name }}", "write", function(r) {
+				wn.require("lib/js/wn/website/editable.js");
+				wn.make_editable($('[itemprop="description"]'), "Item", "{{ name }}", "web_long_description");
+			});
 		}
-	})
-
+	});
 </script>
 {% endblock %}