Open aaronskiba opened 3 months ago
Fixes #3439
Changes proposed in this PR:
if @plan.editable_by?(current_user.id)
Please include a CHANGELOG entry.
You can find it at [CHANGELOG.md](https://github.com/DMPRoadmap/roadmap/blob/main/CHANGELOG.md).
Generated by :no_entry_sign: Danger
Fixes #3439
Changes proposed in this PR:
if @plan.editable_by?(current_user.id)
permission check prevents users with "Read only" access from accessing the button.