erpnext-permissions

What problem does it solve?

ERPNext permissions are complex and error-prone; this skill provides a comprehensive, deterministic framework to implement and audit access control across DocTypes, roles, user permissions, perm levels, hooks, and data masking.

Core Features & Use Cases

• Five-layer permission model: Role Permissions, User Permissions, Perm Levels, Permission Hooks, Data Masking.
• Provides patterns for deny-by-default, owner-based access, and query-based filtering to enforce security across ERPNext apps.
• Real-world use: secure access to customer data, restrict sensitive fields via perm levels, and implement custom permission hooks for business rules.

Quick Start

Implement a basic permission hook that denies write access to cancelled documents, then expand to a full multi-layer policy across roles, user permissions, and data masking.