Update boards issue creation authorization

2018-10-24 17:58:34 +08:00 · 2018-10-24 17:58:34 +08:00 · 6dda85927d
parent 5b27e2dbda
commit 6dda85927d
1 changed files with 8 additions and 1 deletions
--- a/app/controllers/concerns/boards_responses.rb
+++ b/app/controllers/concerns/boards_responses.rb
@ -50,7 +50,14 @@ module BoardsResponses
  end

  def authorize_create_issue
-    authorize_action_for!(project, :admin_issue)
+    board = board_parent.boards.find(issue_params[:board_id])
+    list = board.lists.find(issue_params[:list_id])
+
+    if list.backlog?
+      authorize_action_for!(project, :create_issue)
+    else
+      authorize_action_for!(project, :admin_issue)
+    end
  end

  def authorize_admin_list