From 2d08bbe8440dae11af92b9e6e90349ec24255de4 Mon Sep 17 00:00:00 2001 From: Faris Ansari Date: Fri, 19 Mar 2021 13:23:29 +0530 Subject: [PATCH] Updated Code Security Guidelines (markdown) --- Code-Security-Guidelines.md | 1 + 1 file changed, 1 insertion(+) diff --git a/Code-Security-Guidelines.md b/Code-Security-Guidelines.md index c6ab176..a409e8b 100644 --- a/Code-Security-Guidelines.md +++ b/Code-Security-Guidelines.md @@ -53,6 +53,7 @@ This looks like a simple helper at first, but it allows a user to create **any** You can use a combination of `frappe.only_for` method to restrict the method to System Managers and some manual checks. For e.g., ``` +@frappe.whitelist() def create_document(values): frappe.only_for('System User')