Fix: unauthorized sorting of group tasks (#11348)

- Check if column is belongs to user dashboard before choosing which endpoint use to move task
This commit is contained in:
Aleksey
2019-09-09 16:46:38 +03:00
committed by Matteo Pagliazzi
parent 9a49a05eac
commit 7219aa963b

View File

@@ -482,7 +482,7 @@ export default {
const newIndexOnServer = originTasks.findIndex(taskId => taskId === taskIdToReplace);
let newOrder;
if (taskToMove.group.id) {
if (taskToMove.group.id && !this.isUser) {
newOrder = await this.$store.dispatch('tasks:moveGroupTask', {
taskId: taskIdToMove,
position: newIndexOnServer,