diff options
| author | Jean-Philippe Lang <jp_lang@yahoo.fr> | 2014-12-13 14:01:56 +0000 |
|---|---|---|
| committer | Jean-Philippe Lang <jp_lang@yahoo.fr> | 2014-12-13 14:01:56 +0000 |
| commit | 07b44a46628c1fc5ac9797b3b376f48c986c8d1b (patch) | |
| tree | b115048d1d01b1325cf448d68e0b8540ea94c548 /app | |
| parent | 95f58c69d257a9a195ff41d49a95721738841993 (diff) | |
| download | redmine-07b44a46628c1fc5ac9797b3b376f48c986c8d1b.tar.gz redmine-07b44a46628c1fc5ac9797b3b376f48c986c8d1b.zip | |
Droped legacy behaviour that allows a user to edit a few attributes of an issue without the edit_issues permission if a status transition is allowed (#15988).
Now that we can control permission on each field, this behaviour is no longer needed. The edit_issues permission is now required, which is consistent with the current requirements for bulk edition.
git-svn-id: http://svn.redmine.org/redmine/trunk@13746 e93f8b46-1217-0410-a6f0-8f06a7374b81
Diffstat (limited to 'app')
| -rw-r--r-- | app/models/issue.rb | 8 | ||||
| -rw-r--r-- | app/views/issues/_edit.html.erb | 2 |
2 files changed, 1 insertions, 9 deletions
diff --git a/app/models/issue.rb b/app/models/issue.rb index 84a5d7b6c..31c427bd6 100644 --- a/app/models/issue.rb +++ b/app/models/issue.rb @@ -405,14 +405,6 @@ class Issue < ActiveRecord::Base 'notes', :if => lambda {|issue, user| issue.new_record? || user.allowed_to?(:edit_issues, issue.project) } - safe_attributes 'status_id', - 'assigned_to_id', - 'fixed_version_id', - 'done_ratio', - 'lock_version', - 'notes', - :if => lambda {|issue, user| issue.new_statuses_allowed_to(user).any? } - safe_attributes 'notes', :if => lambda {|issue, user| user.allowed_to?(:add_issue_notes, issue.project)} diff --git a/app/views/issues/_edit.html.erb b/app/views/issues/_edit.html.erb index e09a72695..b16e85f2f 100644 --- a/app/views/issues/_edit.html.erb +++ b/app/views/issues/_edit.html.erb @@ -2,7 +2,7 @@ <%= error_messages_for 'issue', 'time_entry' %> <%= render :partial => 'conflict' if @conflict %> <div class="box"> - <% if @edit_allowed || !@allowed_statuses.empty? %> + <% if @edit_allowed %> <fieldset class="tabular"><legend><%= l(:label_change_properties) %></legend> <div id="all_attributes"> <%= render :partial => 'form', :locals => {:f => f} %> |