From 93e2defc96d49fe031dd258973df2e193f406a61 Mon Sep 17 00:00:00 2001 From: Anand Doshi Date: Fri, 25 Jul 2014 14:57:37 +0530 Subject: [PATCH] [fix] Feed listing based on permissions --- erpnext/home/doctype/feed/feed.py | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/erpnext/home/doctype/feed/feed.py b/erpnext/home/doctype/feed/feed.py index 80ef6df6cd..df8ccb2ef2 100644 --- a/erpnext/home/doctype/feed/feed.py +++ b/erpnext/home/doctype/feed/feed.py @@ -4,6 +4,7 @@ from __future__ import unicode_literals import frappe import frappe.defaults +import frappe.permissions from frappe.model.document import Document class Feed(Document): @@ -19,6 +20,9 @@ def on_doctype_update(): def get_permission_query_conditions(user): if not user: user = frappe.session.user + if not frappe.permissions.apply_user_permissions("Feed", "read", user): + return "" + user_permissions = frappe.defaults.get_user_permissions(user) can_read = frappe.get_user(user).get_can_read()