Sales Order suddenly viewable by non-creator

Frappe Framework Bug
1

Hi,
I previously set each sales order can only viewable by its creator, and it has been running as expected for the pass 3 months until just now.

Suddenly every sales user can see everyone sales order. I’m pretty sure I didn’t touch anything regarding permissions.

Anyone experience the same thing?

2

Hi there,

What does the Role Permission Manager show for that doctype/role?

3

Thanks for replying. Did you meant these?

Screenshot_20220506_134913_com.android.chrome
Screenshot_20220506_134913_com.android.chrome2400×1128 144 KB

Screenshot_20220506_134854_com.android.chrome
Screenshot_20220506_134854_com.android.chrome2400×1128 150 KB

And this is the user role

Screenshot_20220506_135019_com.android.chrome
Screenshot_20220506_135019_com.android.chrome1128×2400 199 KB

4

Hmm…it’s working fine for me on a fresh system. These complex interactions are always tricky to debug. My suggestion would be to try to strip everything down to base parts. Create a new user with only the one role, and see if there’s still an issue. It could be a thousand different things causing the problem, including sales order read permissions applied to any of the other roles you’ve got listed.