Update boards issue creation authorization

6dda8592 · Heinrich Lee Yu · 5b27e2db · 6dda8592
Commit 6dda8592 authored Oct 24, 2018 by Heinrich Lee Yu
Show whitespace changes
Inline Side-by-side

Showing with 8 additions and 1 deletion

app/controllers/concerns/boards_responses.rb app/controllers/concerns/boards_responses.rb +8 -1

No files found.
--- a/app/controllers/concerns/boards_responses.rb
+++ b/app/controllers/concerns/boards_responses.rb
@@ -50,8 +50,15 @@ module BoardsResponses
  end

  def authorize_create_issue
+    board = board_parent.boards.find(issue_params[:board_id])
+    list = board.lists.find(issue_params[:list_id])
+
+    if list.backlog?
+      authorize_action_for!(project, :create_issue)
+    else
      authorize_action_for!(project, :admin_issue)
    end
+  end

  def authorize_admin_list
    authorize_action_for!(board.parent, :admin_list)