Strict User Permission not working for cost center

[zerodiscount]

Information about bug

Setting: Branch user (accounts module) with user permission on cost center (restricted to branch cost center) and strict user permissions are enabled.

• By default - when the P&L standard report is run - the cost center filter is not applied - and the query returns result with a blank cost center field. In this instance, branch user is able to see company wide profitability. When user clicks on the cost center filter - then in drop down - the choice is blank or their cost center. As soon as they select their cost center - then branch P&L is shown. However by default - since no filter is applied, a branch user is able to "escape" their user permission and see company wide data (all standard financial reports).

• When user logs in - the accounting dashboard shows P&L Chart of corporate level profitability by default.

Module

accounts

Version

Frappe 14.12.0
ERPNext 14.3.1

Installation method

manual install

Relevant log output / Stack trace / Full Error Message.

No response