From f4e882ba3eca9b4415ab6f2d87905d8f221bf469 Mon Sep 17 00:00:00 2001
From: Jannat Patel <pateljannat2308@gmail.com>
Date: Fri, 5 May 2023 13:22:07 +0530
Subject: [PATCH] fix: don't allow guest users to search the people page

---
 lms/overrides/user.py     | 2 +-
 lms/www/people/index.html | 2 ++
 2 files changed, 3 insertions(+), 1 deletion(-)

diff --git a/lms/overrides/user.py b/lms/overrides/user.py
index 6cad679a..b92366b4 100644
--- a/lms/overrides/user.py
+++ b/lms/overrides/user.py
@@ -300,7 +300,7 @@ def on_session_creation(login_manager):
 		frappe.local.response["home_page"] = "/courses"
 
 
-@frappe.whitelist(allow_guest=True)
+@frappe.whitelist()
 def search_users(start=0, text=""):
 	or_filters = get_or_filters(text)
 	count = len(get_users(or_filters, 0, 900000000, text))
diff --git a/lms/www/people/index.html b/lms/www/people/index.html
index 0bbb80bc..e3f2e52d 100644
--- a/lms/www/people/index.html
+++ b/lms/www/people/index.html
@@ -8,7 +8,9 @@
 <div class="common-page-style">
 	<div class="container">
 
+		{% if frappe.session.user != "Guest" %}
 		<input class="search pull-right" id="search-user" placeholder="{{ _('Search') }}">
+		{% endif  %}
 		<div class="course-home-headings">{{ _("People") }} </div>
 
 		<div class="empty-state alert alert-dismissible hide" id="search-empty-state">