Unexpected permissions change Accounts Receivable Report

After latest update to:
ERPNext: v14.88.2 (version-14)
Frappe Framework: v14.96.14 (version-14)
Frappe HR: v14.37.7 (version-14)
Payments: v0.0.1 (develop)

Users used to be able to run Accounts Receivable reports now get an error indicating need permission to Payment Entry Ledger. Problem is giving them permission to the Payment Entry Ledger doctype to Read lets them see some info for accounts and journal entries they do not otherwise have permission for. They cannot see the journal entries themselves, but all the journal entry info in the Payment Entry Ledger which is more than they could see before and is for things not related to accounts receivable.

Was this intentional? How do we not allow this permission to break the previous permissions set?

1 Like