Merge pull request #384 from taigaio/bug/2403/anon-can-edit-custom-fields

Bug#2403 Force to only show edit template if the custom-field is editabl...

app/coffee/modules/common/custom-field-values.coffee

@@ -128,15 +128,16 @@ CustomAttributeValueDirective = ($template, $selectedText) ->
     link = ($scope, $el, $attrs, $ctrl) ->
         render = (attributeValue, edit=false) ->
             value = attributeValue.value
+            editable = isEditable()
             ctx = {
                 id: attributeValue.id
                 name: attributeValue.name
                 description: attributeValue.description
                 value: value
-                isEditable: isEditable()
+                isEditable: editable
             }
 
-            if edit or not value
+            if editable and (edit or not value)
                 html = templateEdit(ctx)
             else
                 html = template(ctx)