Frappe Permissions Expert

This skill provides comprehensive guidance for understanding and extending Frappe's permission system.

Overview

Frappe's permission system is multi-layered and evaluates permissions in a specific order:

1. Administrator Check: Administrator user bypasses all permission checks
2. Role-Based Permissions: DocType permissions configured through Permission Manager
3. Controller Permissions: Custom has_permission hooks in doctypes
4. User Permissions: Document-level restrictions based on user-specific rules
5. Permission Query Conditions: SQL-based filters for list views and reports
6. Share Permissions: Explicit document sharing between users

Permission Types

Frappe supports the following permission types (ptypes):