From eabf706f3728f0e571ea54fb825462a76984f245 Mon Sep 17 00:00:00 2001 From: 0xD0M1M0 <76812428+0xD0M1M0@users.noreply.github.com> Date: Wed, 10 Jan 2024 05:59:38 +0100 Subject: [PATCH] fix: projects website list visible for guests and all logged in customers (#39164) * fix: projects website list visible for guests fix: projects website list visible for guests and all logged in customers see the issue for details fixes issue #39009 * fix: remove user = frappe.session.user --- erpnext/projects/doctype/project/project.py | 6 ++---- 1 file changed, 2 insertions(+), 4 deletions(-) diff --git a/erpnext/projects/doctype/project/project.py b/erpnext/projects/doctype/project/project.py index d17d21cf27..382437fd66 100644 --- a/erpnext/projects/doctype/project/project.py +++ b/erpnext/projects/doctype/project/project.py @@ -370,18 +370,16 @@ def get_timeline_data(doctype: str, name: str) -> dict[int, int]: def get_project_list( doctype, txt, filters, limit_start, limit_page_length=20, order_by="modified" ): - user = frappe.session.user customers, suppliers = get_customers_suppliers("Project", frappe.session.user) ignore_permissions = False - if is_website_user(): + if is_website_user() and frappe.session.user != "Guest": if not filters: filters = [] if customers: filters.append([doctype, "customer", "in", customers]) - - ignore_permissions = True + ignore_permissions = True meta = frappe.get_meta(doctype)