Render commit link for users with permissions only

10 years ago · de86867331
parent 7895e29c7c
commit de86867331
1 changed files with 2 additions and 1 deletions
--- a/lib/api/v3/work_packages/form/form_representer.rb
+++ b/lib/api/v3/work_packages/form/form_representer.rb
@ -75,7 +75,8 @@ module API
            {
              href: "#{root_path}api/v3/work_packages/#{represented.id}",
              method: :patch
-            } if represented.valid?
+            } if @current_user.allowed_to?(:edit_work_packages, represented.project) &&
+                 represented.valid?
          end

          property :payload,