MIDNIGHT/enlight-lms
2
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

fix: discussions reply endpoint permission check

Browse Source
This commit is contained in:
Jannat Patel
2026-02-16 12:18:41 +05:30
parent ee73d8db86
commit 9f6f717585
1 changed files with 4 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
lms/lms/utils.py
View File

@@ -1669,8 +1669,10 @@ def create_discussion_topic(doctype: str, docname: str) -> str:
@frappe.whitelist()
def get_discussion_replies(topic: str):
doctype = frappe.db.get_value("Discussion Topic", topic, "reference_doctype")
if not can_access_topic(doctype, topic):
topic_details = frappe.db.get_value(
"Discussion Topic", topic, ["reference_doctype", "reference_docname"], as_dict=1
)
if not can_access_topic(topic_details.reference_doctype, topic_details.reference_docname):
frappe.throw(_("You are not authorized to view the discussion replies for this topic."))
replies = frappe.get_all(