From 09105d6e3d222b199fdb7f40ad2a9e870af660fe Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Julius=20H=C3=A4rtl?= Date: Wed, 25 Jul 2018 18:39:08 +0200 Subject: [PATCH] Check when assigning users MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Signed-off-by: Julius Härtl --- lib/Service/CardService.php | 2 ++ 1 file changed, 2 insertions(+) diff --git a/lib/Service/CardService.php b/lib/Service/CardService.php index f76ce220e..26fa3753c 100644 --- a/lib/Service/CardService.php +++ b/lib/Service/CardService.php @@ -195,6 +195,7 @@ class CardService { } public function assignUser($cardId, $userId) { + $this->permissionService->checkPermission($this->cardMapper, $cardId, Acl::PERMISSION_EDIT); $assignments = $this->assignedUsersMapper->find($cardId); foreach ($assignments as $assignment) { if ($assignment->getParticipant() === $userId) { @@ -208,6 +209,7 @@ class CardService { } public function unassignUser($cardId, $userId) { + $this->permissionService->checkPermission($this->cardMapper, $cardId, Acl::PERMISSION_EDIT); $assignments = $this->assignedUsersMapper->find($cardId); foreach ($assignments as $assignment) { if ($assignment->getParticipant() === $userId) {