From 3131ed0948fecf486e88842544b53d4817970d28 Mon Sep 17 00:00:00 2001
From: zmagod <zmago_devetak@yahoo.com>
Date: Fri, 16 Mar 2018 17:30:49 +0100
Subject: [PATCH] adds permission check to archived project actions dropdown
 [fixes SCI-2194]

---
 app/views/projects/archive/_project.html.erb  | 38 +++++++++++--------
 .../projects/archive/_team_projects.html.erb  |  2 +-
 2 files changed, 24 insertions(+), 16 deletions(-)

diff --git a/app/views/projects/archive/_project.html.erb b/app/views/projects/archive/_project.html.erb
index 4b9ddfd74..b382e4644 100644
--- a/app/views/projects/archive/_project.html.erb
+++ b/app/views/projects/archive/_project.html.erb
@@ -1,20 +1,28 @@
 <div class="panel panel-default panel-project panel-archive">
   <div class="panel-heading">
-
-    <div class="dropdown pull-right">
-      <button class="btn btn-link dropdown-toggle" type="button" id="dropdownMenu1" data-toggle="dropdown" aria-haspopup="true" aria-expanded="true">
-        <span class="caret"></span>
-      </button>
-      <% project_form = nil %>
-      <%= form_for project, method: :patch, format: :html do |f| %>
-        <% project_form = f %>
-        <%= f.hidden_field :archived, value: false %>
-      <% end %>
-      <ul class="dropdown-menu dropdown-menu-right" aria-labelledby="dropdownMenu1">
-        <li class="dropdown-header"><%= t('projects.index.options_header') %></li>
-        <li><a href="#" class="form-submit-link" data-submit-form="<%= project_form.options[:html][:id] %>"><%= t 'projects.index.restore_option' %></a></li>
-      </ul>
-    </div>
+    <% if can_restore_project?(project) %>
+      <div class="dropdown pull-right">
+        <button class="btn btn-link dropdown-toggle"
+                type="button"
+                id="dropdownMenu1"
+                data-toggle="dropdown"
+                aria-haspopup="true"
+                aria-expanded="true">
+          <span class="caret"></span>
+        </button>
+        <% project_form = nil %>
+        <%= form_for project, method: :patch, format: :html do |f| %>
+          <% project_form = f %>
+          <%= f.hidden_field :archived, value: false %>
+        <% end %>
+        <ul class="dropdown-menu dropdown-menu-right" aria-labelledby="dropdownMenu1">
+          <li class="dropdown-header"><%= t('projects.index.options_header') %></li>
+          <li><a href="#"
+            class="form-submit-link"
+            data-submit-form="<%= project_form.options[:html][:id] %>"><%= t 'projects.index.restore_option' %></a></li>
+        </ul>
+      </div>
+    <% end %>
 
     <h3 class="panel-title">
       <% if project.hidden? then %>
diff --git a/app/views/projects/archive/_team_projects.html.erb b/app/views/projects/archive/_team_projects.html.erb
index c884b57b9..d15b74bba 100644
--- a/app/views/projects/archive/_team_projects.html.erb
+++ b/app/views/projects/archive/_team_projects.html.erb
@@ -3,7 +3,7 @@
 <div class="row">
 <% projects.each_index do |i| project = projects[i] %>
   <div class="col-lg-3 col-md-4 col-sm-6 col-xs-12">
-  <%= render partial: "projects/archive/project", locals: {project: project} %>
+  <%= render partial: "projects/archive/project", locals: { project: project } %>
   </div>
   <% if (i+1) % 4 == 0 %>
   <div class="clearfix visible-lg-block"></div>