The weight assignment box shows up when the sidebar is collapsed even if you don't have permissions
Summary
Old summary
In a repository that I'm not authorized for assigning people to issue, adding milestones, or adding labels - I can assign any weight up to four digits.I can assign issue weights when I click the weight button on a collapsed right sidebar. However I can not assign issue weights when I view sidebar by clicking the collapse button.
I can set and change issue weights in all projects, including gitlab-ce
.
After some investigation, it seems the backend security issue has been fixed already. We just need the frontend problem fixed (showing the edit box when the sidebar is collapsed even if you do not have permissions)
Relevant logs and/or screenshots
Edited by Mario de la Ossa