From f3b944c77f54e988de250acf30239010bdfa2399 Mon Sep 17 00:00:00 2001
From: Rafael de Camargo <rafaelcamargo@MacBook-Air-de-Rafael.local>
Date: Thu, 10 Jan 2019 01:52:00 -0200
Subject: Hide edit button when user cannot edit task

Check for custom roles to show edit button
Fixes #4123
---
 app/Template/board/task_private.php | 8 ++++++--
 1 file changed, 6 insertions(+), 2 deletions(-)

(limited to 'app')

diff --git a/app/Template/board/task_private.php b/app/Template/board/task_private.php
index 396184dd..c4e1c023 100644
--- a/app/Template/board/task_private.php
+++ b/app/Template/board/task_private.php
@@ -19,7 +19,9 @@
             <div class="task-board-saving-icon" style="display: none;"><i class="fa fa-spinner fa-pulse"></i></div>
             <?php if ($this->user->hasProjectAccess('TaskModificationController', 'edit', $task['project_id'])): ?>
                 <?= $this->render('task/dropdown', array('task' => $task, 'redirect' => 'board')) ?>
-                <?= $this->modal->large('edit', '', 'TaskModificationController', 'edit', array('task_id' => $task['id'], 'project_id' => $task['project_id'])) ?>
+                <?php if ($this->projectRole->canUpdateTask($task)): ?>
+                    <?= $this->modal->large('edit', '', 'TaskModificationController', 'edit', array('task_id' => $task['id'], 'project_id' => $task['project_id'])) ?>
+                <?php endif ?>
             <?php else: ?>
                 <strong><?= '#'.$task['id'] ?></strong>
             <?php endif ?>
@@ -37,7 +39,9 @@
             <div class="task-board-header">
                 <?php if ($this->user->hasProjectAccess('TaskModificationController', 'edit', $task['project_id'])): ?>
                     <?= $this->render('task/dropdown', array('task' => $task, 'redirect' => 'board')) ?>
-                    <?= $this->modal->large('edit', '', 'TaskModificationController', 'edit', array('task_id' => $task['id'], 'project_id' => $task['project_id'])) ?>
+                    <?php if ($this->projectRole->canUpdateTask($task)): ?>
+                        <?= $this->modal->large('edit', '', 'TaskModificationController', 'edit', array('task_id' => $task['id'], 'project_id' => $task['project_id'])) ?>
+                    <?php endif ?>
                 <?php else: ?>
                     <strong><?= '#'.$task['id'] ?></strong>
                 <?php endif ?>
-- 
cgit v1.2.3