Frappe Permissions

Deterministic patterns for the five-layer Frappe permission system.

Permission Layers

Layer	Controls	Configured Via	Version
Role Permissions	What users CAN do	DocType permissions table	All
User Permissions	WHICH records users see	User Permission DocType	All
Perm Levels	WHICH fields users see/edit	Field `permlevel` property	All
Permission Hooks	Custom deny logic	`hooks.py`	All
Data Masking	Masked field values	Field `mask` property	[v16+]