fix: enfore permission on make_payment_request

Author: ruthra-kumar

erpnext/accounts/doctype/payment_request/payment_request.py

@@ -535,10 +535,12 @@ def _allocate_payment_request_to_pe_references(self, references):
 				row_number += TO_SKIP_NEW_ROW
 
 
-@frappe.whitelist(allow_guest=True)
+@frappe.whitelist()
 def make_payment_request(**args):
 	"""Make payment request"""
 
+	frappe.has_permission(doctype="Payment Request", ptype="write", throw=True)
+
 	args = frappe._dict(args)
 	if args.dt not in ALLOWED_DOCTYPES_FOR_PAYMENT_REQUEST:
 		frappe.throw(_("Payment Requests cannot be created against: {0}").format(frappe.bold(args.dt)))