Check when assigning users
Signed-off-by: Julius Härtl <jus@bitgrid.net>
This commit is contained in:
@@ -195,6 +195,7 @@ class CardService {
|
|||||||
}
|
}
|
||||||
|
|
||||||
public function assignUser($cardId, $userId) {
|
public function assignUser($cardId, $userId) {
|
||||||
|
$this->permissionService->checkPermission($this->cardMapper, $cardId, Acl::PERMISSION_EDIT);
|
||||||
$assignments = $this->assignedUsersMapper->find($cardId);
|
$assignments = $this->assignedUsersMapper->find($cardId);
|
||||||
foreach ($assignments as $assignment) {
|
foreach ($assignments as $assignment) {
|
||||||
if ($assignment->getParticipant() === $userId) {
|
if ($assignment->getParticipant() === $userId) {
|
||||||
@@ -208,6 +209,7 @@ class CardService {
|
|||||||
}
|
}
|
||||||
|
|
||||||
public function unassignUser($cardId, $userId) {
|
public function unassignUser($cardId, $userId) {
|
||||||
|
$this->permissionService->checkPermission($this->cardMapper, $cardId, Acl::PERMISSION_EDIT);
|
||||||
$assignments = $this->assignedUsersMapper->find($cardId);
|
$assignments = $this->assignedUsersMapper->find($cardId);
|
||||||
foreach ($assignments as $assignment) {
|
foreach ($assignments as $assignment) {
|
||||||
if ($assignment->getParticipant() === $userId) {
|
if ($assignment->getParticipant() === $userId) {
|
||||||
|
|||||||
Reference in New Issue
Block a user