fix: permission check for cloning board

Signed-off-by: Luka Trovic <luka@nextcloud.com>

[skip ci]

lib/Service/BoardService.php

@@ -547,6 +547,10 @@ class BoardService {
 	public function clone($id, $userId) {
 		$this->boardServiceValidator->check(compact('id', 'userId'));
 
+		if (!$this->permissionService->canCreate()) {
+			throw new NoPermissionException('Creating boards has been disabled for your account.');
+		}
+
 		$this->permissionService->checkPermission($this->boardMapper, $id, Acl::PERMISSION_READ);
 
 		$board = $this->boardMapper->find($id);