summaryrefslogtreecommitdiff
path: root/app/Controller/BoardAjaxController.php
diff options
context:
space:
mode:
authorFrederic Guillot <fred@kanboard.net>2016-09-11 16:08:03 -0400
committerFrederic Guillot <fred@kanboard.net>2016-09-11 16:08:03 -0400
commitd8f6d8568396816a6bfaca1e01211384e803cf91 (patch)
tree16d735faa3f6f9aafb6c78650470e77347cae1ab /app/Controller/BoardAjaxController.php
parenta0227cad69aff9486fba1d7b2a19e6da97450100 (diff)
Add project restrictions for custom roles
Diffstat (limited to 'app/Controller/BoardAjaxController.php')
-rw-r--r--app/Controller/BoardAjaxController.php8
1 files changed, 1 insertions, 7 deletions
diff --git a/app/Controller/BoardAjaxController.php b/app/Controller/BoardAjaxController.php
index cc3b846e..484ef67d 100644
--- a/app/Controller/BoardAjaxController.php
+++ b/app/Controller/BoardAjaxController.php
@@ -28,14 +28,8 @@ class BoardAjaxController extends BaseController
}
$values = $this->request->getJson();
- $canMoveTask = $this->columnMoveRestrictionModel->isAllowed(
- $project_id,
- $this->helper->user->getProjectUserRole($project_id),
- $values['src_column_id'],
- $values['dst_column_id']
- );
- if (! $canMoveTask) {
+ if (! $this->helper->projectRole->canMoveTask($project_id, $values['src_column_id'], $values['dst_column_id'])) {
throw new AccessForbiddenException(e("You don't have the permission to move this task"));
}