summaryrefslogtreecommitdiffstats
path: root/client/components/cards/attachments.jade
diff options
context:
space:
mode:
authorLauri Ojansivu <x@xet7.org>2019-07-24 15:01:05 +0300
committerLauri Ojansivu <x@xet7.org>2019-07-24 15:01:05 +0300
commita68c928896a94c377134f29a7183aa0b5a423720 (patch)
treeaabe02c49b7c375cad82f06f68292b56425f4c74 /client/components/cards/attachments.jade
parent62bfe1da21149926a12ee50c1ecb91233587e25c (diff)
downloadwekan-a68c928896a94c377134f29a7183aa0b5a423720.tar.gz
wekan-a68c928896a94c377134f29a7183aa0b5a423720.tar.bz2
wekan-a68c928896a94c377134f29a7183aa0b5a423720.zip
Prevent isCommentOnly user adding attachments, editing list names, moving lists,
and seeing board settings menu. Show non-editable Custom Fields to isCommentOnly user. Thanks to xet7 ! Closes wekan/wekan-snap#97, closes #2416, closes #2255
Diffstat (limited to 'client/components/cards/attachments.jade')
-rw-r--r--client/components/cards/attachments.jade26
1 files changed, 14 insertions, 12 deletions
diff --git a/client/components/cards/attachments.jade b/client/components/cards/attachments.jade
index 0f79323b..2a96f4f4 100644
--- a/client/components/cards/attachments.jade
+++ b/client/components/cards/attachments.jade
@@ -37,17 +37,19 @@ template(name="attachmentsGalery")
i.fa.fa-download
| {{_ 'download'}}
if currentUser.isBoardMember
- if isImage
- a(class="{{#if $eq ../coverId _id}}js-remove-cover{{else}}js-add-cover{{/if}}")
- i.fa.fa-thumb-tack
- if($eq ../coverId _id)
- | {{_ 'remove-cover'}}
- else
- | {{_ 'add-cover'}}
- a.js-confirm-delete
- i.fa.fa-close
- | {{_ 'delete'}}
+ unless currentUser.isCommentOnly
+ if isImage
+ a(class="{{#if $eq ../coverId _id}}js-remove-cover{{else}}js-add-cover{{/if}}")
+ i.fa.fa-thumb-tack
+ if($eq ../coverId _id)
+ | {{_ 'remove-cover'}}
+ else
+ | {{_ 'add-cover'}}
+ a.js-confirm-delete
+ i.fa.fa-close
+ | {{_ 'delete'}}
if currentUser.isBoardMember
- li.attachment-item.add-attachment
- a.js-add-attachment {{_ 'add-attachment' }}
+ unless currentUser.isCommentOnly
+ li.attachment-item.add-attachment
+ a.js-add-attachment {{_ 'add-attachment' }}