##// END OF EJS Templates
Check permission before retrieving projects....
Jean-Philippe Lang -
r8412:6539d04622fb
parent child
Show More
@@ -246,8 +246,10 class Issue < ActiveRecord::Base
246
246
247 safe_attributes 'project_id',
247 safe_attributes 'project_id',
248 :if => lambda {|issue, user|
248 :if => lambda {|issue, user|
249 projects = Issue.allowed_target_projects_on_move(user)
249 if user.allowed_to?(:move_issues, issue.project)
250 projects.include?(issue.project) && projects.size > 1
250 projects = Issue.allowed_target_projects_on_move(user)
251 projects.include?(issue.project) && projects.size > 1
252 end
251 }
253 }
252
254
253 safe_attributes 'tracker_id',
255 safe_attributes 'tracker_id',
General Comments 0
You need to be logged in to leave comments. Login now