Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

fix: Check permission_type in get_permitted_fieldnames [v13] (backport #20905) #20955

Merged
merged 4 commits into from
May 16, 2023

Conversation

mergify[bot]
Copy link
Contributor

@mergify mergify bot commented May 10, 2023

This is a v13 backport of pull request #20905 via #20810.

* fix: Dont assume user & permission_type in get_permitted_fileds

* fix: Allow only search fields for select permission type

* test: Add check for permitted fields with select perm

* fix: Setup permission_map & use get_permitted_fields

* fix: Pass current dt as fallback parent_doctype

* fix(reportview): Use get_permitted_fields for resource API

Added check for system setting `apply_perm_level_on_api_calls` on this
change

* test: Enable permlevel restrictions to test select query

(cherry picked from commit 707e485)

# Conflicts:
#	frappe/desk/reportview.py
#	frappe/model/__init__.py
#	frappe/model/db_query.py
#	frappe/tests/test_permissions.py
@mergify mergify bot requested review from a team and removed request for a team May 10, 2023 07:37
@mergify mergify bot added the conflicts label May 10, 2023
@mergify mergify bot requested a review from phot0n May 10, 2023 07:37
@gavindsouza gavindsouza changed the title fix: Check permission_type in get_permitted_fieldnames [v14] (backport #20905) fix: Check permission_type in get_permitted_fieldnames [v13] (backport #20905) May 10, 2023
* Fixed imports
* Compatible typing
* Revert permission_map
@gavindsouza gavindsouza force-pushed the mergify/bp/version-13-hotfix/pr-20905 branch from 0d90797 to 43ce286 Compare May 10, 2023 09:40
@gavindsouza gavindsouza removed their assignment May 14, 2023
@ankush ankush merged commit ea6d350 into version-13-hotfix May 16, 2023
9 checks passed
@ankush ankush deleted the mergify/bp/version-13-hotfix/pr-20905 branch May 16, 2023 08:07
frappe-pr-bot pushed a commit that referenced this pull request May 16, 2023
## [13.56.3](v13.56.2...v13.56.3) (2023-05-16)

### Bug Fixes

* avoid internal arrays in get_all_docs (backport [#20950](#20950)) ([#20958](#20958)) ([43b051f](43b051f))
* Check permission_type in get_permitted_fieldnames [v13] (backport [#20905](#20905)) ([#20955](#20955)) ([ea6d350](ea6d350))
* don't use default filters for auto-email report ([#20876](#20876)) ([7d7500f](7d7500f))
* filters while exporting or creating new auto email reports for custom reports (backport [#20960](#20960)) ([#21020](#21020)) ([723ec9a](723ec9a))
* report print view not working ([#21002](#21002)) ([#21003](#21003)) ([ca73d72](ca73d72))
@frappe-pr-bot
Copy link
Collaborator

🎉 This PR is included in version 13.56.3 🎉

The release is available on GitHub release

Your semantic-release bot 📦🚀

@github-actions github-actions bot locked as resolved and limited conversation to collaborators May 31, 2023
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

3 participants