From 2050c2b9b31f2684bb4fa89189075801de9c90ac Mon Sep 17 00:00:00 2001 From: Aditya Hase Date: Mon, 7 Sep 2020 19:53:41 +0530 Subject: [PATCH] fix(auto-repeat): Add permission check for rendering message preview --- frappe/automation/doctype/auto_repeat/auto_repeat.py | 1 + 1 file changed, 1 insertion(+) diff --git a/frappe/automation/doctype/auto_repeat/auto_repeat.py b/frappe/automation/doctype/auto_repeat/auto_repeat.py index c09e347e71..a9a358ce5f 100644 --- a/frappe/automation/doctype/auto_repeat/auto_repeat.py +++ b/frappe/automation/doctype/auto_repeat/auto_repeat.py @@ -403,6 +403,7 @@ def update_reference(docname, reference): @frappe.whitelist() def generate_message_preview(reference_dt, reference_doc, message=None, subject=None): + frappe.has_permission("Auto Repeat", "write", throw=True) doc = frappe.get_doc(reference_dt, reference_doc) subject_preview = _("Please add a subject to your email") msg_preview = frappe.render_template(message, {'doc': doc})