From cb782dd2b967d5885401e8cfecae7a9968f8baf2 Mon Sep 17 00:00:00 2001
From: Juanfran <juanfran.alcantara@kaleidos.net>
Date: Thu, 26 Feb 2015 10:11:49 +0100
Subject: [PATCH] prevent dragging for anonymous user on taskboard

---
 app/coffee/modules/taskboard/sortable.coffee | 71 +++++++++++---------
 1 file changed, 38 insertions(+), 33 deletions(-)

diff --git a/app/coffee/modules/taskboard/sortable.coffee b/app/coffee/modules/taskboard/sortable.coffee
index 16aa5020..57f99711 100644
--- a/app/coffee/modules/taskboard/sortable.coffee
+++ b/app/coffee/modules/taskboard/sortable.coffee
@@ -36,47 +36,52 @@ module = angular.module("taigaBacklog")
 
 TaskboardSortableDirective = ($repo, $rs, $rootscope) ->
     link = ($scope, $el, $attrs) ->
-        oldParentScope = null
-        newParentScope = null
-        itemEl = null
-        tdom = $el
+        bindOnce $scope, "project", (project) ->
+            # If the user has not enough permissions we don't enable the sortable
+            if not (project.my_permissions.indexOf("modify_us") > -1)
+                return
 
-        deleteElement = (itemEl) ->
-            # Completelly remove item and its scope from dom
-            itemEl.scope().$destroy()
-            itemEl.off()
-            itemEl.remove()
+            oldParentScope = null
+            newParentScope = null
+            itemEl = null
+            tdom = $el
 
-        tdom.sortable({
-            handle: ".taskboard-task-inner",
-            dropOnEmpty: true
-            connectWith: ".taskboard-tasks-box"
-            revert: 400
-        })
+            deleteElement = (itemEl) ->
+                # Completelly remove item and its scope from dom
+                itemEl.scope().$destroy()
+                itemEl.off()
+                itemEl.remove()
 
-        tdom.on "sortstop", (event, ui) ->
-            parentEl = ui.item.parent()
-            itemEl = ui.item
-            itemTask = itemEl.scope().task
-            itemIndex = itemEl.index()
-            newParentScope = parentEl.scope()
+            tdom.sortable({
+                handle: ".taskboard-task-inner",
+                dropOnEmpty: true
+                connectWith: ".taskboard-tasks-box"
+                revert: 400
+            })
 
-            oldUsId = if oldParentScope.us then oldParentScope.us.id else null
-            oldStatusId = oldParentScope.st.id
-            newUsId = if newParentScope.us then newParentScope.us.id else null
-            newStatusId = newParentScope.st.id
+            tdom.on "sortstop", (event, ui) ->
+                parentEl = ui.item.parent()
+                itemEl = ui.item
+                itemTask = itemEl.scope().task
+                itemIndex = itemEl.index()
+                newParentScope = parentEl.scope()
 
-            if newStatusId != oldStatusId or newUsId != oldUsId
-                deleteElement(itemEl)
+                oldUsId = if oldParentScope.us then oldParentScope.us.id else null
+                oldStatusId = oldParentScope.st.id
+                newUsId = if newParentScope.us then newParentScope.us.id else null
+                newStatusId = newParentScope.st.id
 
-            $scope.$apply ->
-                $rootscope.$broadcast("taskboard:task:move", itemTask, newUsId, newStatusId, itemIndex)
+                if newStatusId != oldStatusId or newUsId != oldUsId
+                    deleteElement(itemEl)
 
-            ui.item.find('a').removeClass('noclick')
+                $scope.$apply ->
+                    $rootscope.$broadcast("taskboard:task:move", itemTask, newUsId, newStatusId, itemIndex)
 
-        tdom.on "sortstart", (event, ui) ->
-            oldParentScope = ui.item.parent().scope()
-            ui.item.find('a').addClass('noclick')
+                ui.item.find('a').removeClass('noclick')
+
+            tdom.on "sortstart", (event, ui) ->
+                oldParentScope = ui.item.parent().scope()
+                ui.item.find('a').addClass('noclick')
 
         $scope.$on "$destroy", ->
             $el.off()