Frappe Core Permissions

What it does

Provides a deterministic, version-aware reference for implementing and auditing the Frappe/ERPNext permission model (v14-v16). It explains the five permission layers (role permissions, user permissions, perm levels, permission hooks, data masking), offers decision trees and API examples, and documents safe patterns and anti-patterns for protecting sensitive data.

When to use it

Use this skill when designing or reviewing access control in a Frappe app, migrating permission configurations across versions, writing has_permission or permission_query_conditions hooks, or debugging why users can/cannot see or edit particular records. Helpful during code reviews, audits, and security hardening.

What's included

• Scripts: none detected in the repo path (has_scripts=false)
• References: detailed reference files under references/ (has_references=true) including permission API and examples
• Instructions: decision trees, code snippets for frappe.has_permission, get_doc_permissions, sharing API, and hook patterns with explicit red-lines and version differences summarized.

Compatible agents

Best suited to agents that can run or produce code snippets: Claude Code, Codex-style coding agents, and general-purpose assistant agents that output Python/Frappé examples.