fix: projects website list visible for guests and all logged in customers (#39164)
* fix: projects website list visible for guests
fix: projects website list visible for guests and all logged in customers
see the issue for details
fixes issue #39009
* fix: remove user = frappe.session.user
diff --git a/erpnext/projects/doctype/project/project.py b/erpnext/projects/doctype/project/project.py
index d17d21c..382437f 100644
--- a/erpnext/projects/doctype/project/project.py
+++ b/erpnext/projects/doctype/project/project.py
@@ -370,18 +370,16 @@
def get_project_list(
doctype, txt, filters, limit_start, limit_page_length=20, order_by="modified"
):
- user = frappe.session.user
customers, suppliers = get_customers_suppliers("Project", frappe.session.user)
ignore_permissions = False
- if is_website_user():
+ if is_website_user() and frappe.session.user != "Guest":
if not filters:
filters = []
if customers:
filters.append([doctype, "customer", "in", customers])
-
- ignore_permissions = True
+ ignore_permissions = True
meta = frappe.get_meta(doctype)