Skip to content

fix(cards): hide actions read-only users cannot run - #8711

Open
ELHart05 wants to merge 1 commit into
nextcloud:mainfrom
ELHart05:fix/read-only-card-actions
Open

ELHart05 wants to merge 1 commit into
nextcloud:mainfrom
ELHart05:fix/read-only-card-actions

Conversation

@ELHart05

@ELHart05 ELHart05 commented Nov 7, 2026

Copy link
Copy Markdown

Summary

Read-only users saw every edit action in the card menu. Using one looked like it worked, even though the server rejected it.

canEdit in the card menu only checked whether the card was archived, and the colour picker had no check at all. canEdit now also needs edit permission on the board, and the colour picker uses it.

Move/copy stays in the menu for read-only users because copying only needs read access on the source board. In that dialog the Move button is hidden when the user can't edit the source board, and boards they can't edit are no longer offered as a target.

Tested on a local instance with a board shared read-only: the user sees only Card details and Move/copy on the board and in the sidebar, copying to their own board works, and an editor keeps every action.

Checklist

  • Code is properly formatted
  • Sign-off message is added to all commits
  • Tests (unit, integration, api and/or acceptance) are included
  • Documentation (manuals or wiki) has been updated or is not required

🤖 AI (if applicable)

  • The content of this PR was partly or fully generated using AI

Copying a card only needs read access on the source board, so Move/copy stays available and only the move button is hidden.

Signed-off-by: Okba Allaoua <o.allaoua@esi-sba.dz>
Assisted-by: ClaudeCode:claude-opus-5-5

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Read-only users are shown actions they can not execute

1 participant