Make sure to respect board acls in the frontend all over the place

Signed-off-by: Julius Härtl <jus@bitgrid.net>
This commit is contained in:
Julius Härtl
2020-01-25 13:37:17 +01:00
parent 7fd8419fa9
commit 1a874ba79b
11 changed files with 150 additions and 71 deletions

View File

@@ -30,7 +30,7 @@
class="card"
@click.self="openCard">
<div class="card-upper">
<h3 v-if="showArchived">
<h3 v-if="showArchived || !canEdit">
{{ card.title }}
</h3>
<h3 v-else-if="!editing" @click.stop="startEditing(card)">
@@ -47,7 +47,7 @@
<input type="button" class="icon-confirm" @click="finishedEdit(card)">
</form>
<Actions v-if="!editing" @click.stop.prevent>
<Actions v-if="canEdit && !editing" @click.stop.prevent>
<ActionButton v-if="showArchived === false" icon="icon-user" @click="assignCardToMe()">
{{ t('deck', 'Assign to me') }}
</ActionButton>
@@ -103,7 +103,7 @@ import { Actions } from '@nextcloud/vue/dist/Components/Actions'
import { ActionButton } from '@nextcloud/vue/dist/Components/ActionButton'
import { Multiselect } from '@nextcloud/vue/dist/Components/Multiselect'
import ClickOutside from 'vue-click-outside'
import { mapState } from 'vuex'
import { mapState, mapGetters } from 'vuex'
import axios from '@nextcloud/axios'
import CardBadges from './CardBadges'
@@ -139,6 +139,9 @@ export default {
showArchived: state => state.showArchived,
currentBoard: state => state.currentBoard,
}),
...mapGetters([
'canEdit',
]),
card() {
return this.$store.getters.cardById(this.id)
},