mirror of
https://github.com/frappe/erpnext.git
synced 2026-02-12 17:23:38 +00:00
Updated Code Security Guidelines (markdown)
@@ -53,6 +53,7 @@ This looks like a simple helper at first, but it allows a user to create **any**
|
||||
You can use a combination of `frappe.only_for` method to restrict the method to System Managers and some manual checks. For e.g.,
|
||||
|
||||
```
|
||||
@frappe.whitelist()
|
||||
def create_document(values):
|
||||
frappe.only_for('System User')
|
||||
|
||||
|
||||
Reference in New Issue
Block a user