From c3e3337de425d338b347e9f8c782e8b9df1deed4 Mon Sep 17 00:00:00 2001 From: raizasafeel <89463672+raizasafeel@users.noreply.github.com> Date: Wed, 1 Apr 2026 13:43:40 +0530 Subject: [PATCH] fix(enrollment): prevent unauthorised enrollments in paid courses --- lms/lms/doctype/lms_enrollment/lms_enrollment.py | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/lms/lms/doctype/lms_enrollment/lms_enrollment.py b/lms/lms/doctype/lms_enrollment/lms_enrollment.py index cbd9ef11..a4a4a75a 100644 --- a/lms/lms/doctype/lms_enrollment/lms_enrollment.py +++ b/lms/lms/doctype/lms_enrollment/lms_enrollment.py @@ -50,6 +50,11 @@ class LMSEnrollment(Document): ) if self.enrollment_from_batch: + if not frappe.db.exists( + "Batch Course", {"parent": self.enrollment_from_batch, "course": self.course} + ): + frappe.throw(_("This batch is not associated with this course.")) + if frappe.db.exists( "LMS Batch Enrollment", {"batch": self.enrollment_from_batch, "member": self.member} ):