Disable ability to drag issues if user doesn't have permissions
Summary
At this moment I can drag any issue from any board to any board at https://gitlab.com/gitlab-org/gitlab-ce/boards
Every drag&drop sends a PUT
request to the backend.
The backend sends 403 Forbidden
back in response.
As far as I remember, in the past if an user didn't have permissions, he wasn't able to drag issues. So this might be a regression
Steps to reproduce
- Open https://gitlab.com/gitlab-org/gitlab-ce/boards
- Start dragging.
Expected behavior
No ability to drag issues if an user doesn't have needed permissions.
Actual behavior
An user can drag everything.
Relevant logs and/or screenshots
Output of checks
Results of GitLab environment info
8.13.0-ee 562bbc61