test/crm
1
0
Fork 1
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix: only allow sales manager to send invite

Browse Source
This commit is contained in:
Shariq Ansari 2025-03-18 15:53:59 +05:30
parent 28ce38ae90
commit c2d53cb3f8
1 changed files with 11 additions and 8 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

19
crm/api/__init__.py
View File

@ -44,7 +44,7 @@ def get_user_signature():
if html_signature: if html_signature:
_signature = html_signature.renderContents() _signature = html_signature.renderContents()
content = "" content = ""
if (cstr(_signature) or signature): if cstr(_signature) or signature:
content = f'<br><p class="signature">{signature}</p>' content = f'<br><p class="signature">{signature}</p>'
return content return content
@ -64,14 +64,16 @@ def check_app_permission():
return True return True
roles = frappe.get_roles() roles = frappe.get_roles()
if any(role in ["System Manager", "Sales User", "Sales Manager", "Sales Master Manager"] for role in roles): if any(
role in ["System Manager", "Sales User", "Sales Manager", "Sales Master Manager"] for role in roles
):
return True return True
return False return False
@frappe.whitelist(allow_guest=True) @frappe.whitelist(allow_guest=True)
def accept_invitation(key: str = None): def accept_invitation(key: str | None = None):
if not key: if not key:
frappe.throw("Invalid or expired key") frappe.throw("Invalid or expired key")
@ -91,6 +93,7 @@ def accept_invitation(key: str = None):
@frappe.whitelist() @frappe.whitelist()
def invite_by_email(emails: str, role: str): def invite_by_email(emails: str, role: str):
frappe.only_for("Sales Manager")
if not emails: if not emails:
return return
email_string = validate_email_address(emails, throw=False) email_string = validate_email_address(emails, throw=False)
@ -120,8 +123,8 @@ def get_file_uploader_defaults(doctype: str):
make_attachments_public = meta.get("make_attachments_public") make_attachments_public = meta.get("make_attachments_public")
return { return {
'allowed_file_types': frappe.get_system_settings("allowed_file_extensions"), "allowed_file_types": frappe.get_system_settings("allowed_file_extensions"),
'max_file_size': get_max_file_size(), "max_file_size": get_max_file_size(),
'max_number_of_files': max_number_of_files, "max_number_of_files": max_number_of_files,
'make_attachments_public': bool(make_attachments_public), "make_attachments_public": bool(make_attachments_public),
} }