| # Copyright (c) 2015, Frappe Technologies Pvt. Ltd. and Contributors |
| # License: GNU General Public License v3. See license.txt |
| |
| from __future__ import unicode_literals |
| import frappe |
| from frappe import _ |
| |
| def get_context(context): |
| context.no_cache = 1 |
| context.doc = frappe.get_doc(frappe.form_dict.doctype, frappe.form_dict.name) |
| context.parents = frappe.form_dict.parents |
| context.doc.supplier = get_supplier() |
| unauthrized_user(context.doc.supplier) |
| context["title"] = frappe.form_dict.name |
| |
| def unauthrized_user(supplier): |
| status = check_supplier_has_docname_access(supplier) |
| if status == False: |
| frappe.throw(_("Not Permitted"), frappe.PermissionError) |
| |
| def get_supplier(): |
| from erpnext.shopping_cart.utils import check_customer_or_supplier |
| key, parties = check_customer_or_supplier() |
| return parties[0] if key == 'Supplier' else '' |
| |
| def check_supplier_has_docname_access(supplier): |
| status = True |
| if frappe.form_dict.name not in frappe.db.sql_list("""select parent from `tabRequest for Quotation Supplier` |
| where supplier = '{supplier}'""".format(supplier=supplier)): |
| status = False |
| return status |