From a85b16ff2c84142803325761fbd6ddc51b795952 Mon Sep 17 00:00:00 2001
From: Martin Artnik <martin@scinote.net>
Date: Wed, 24 Nov 2021 09:36:53 +0100
Subject: [PATCH] Add permission check for checkbox items [SCI-6297]

---
 app/views/steps/_step.html.erb | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/app/views/steps/_step.html.erb b/app/views/steps/_step.html.erb
index 4cc4120f3..abb6d20a0 100644
--- a/app/views/steps/_step.html.erb
+++ b/app/views/steps/_step.html.erb
@@ -148,7 +148,7 @@
                   <% ordered_checklist_items(checklist).each do |checklist_item| %>
                     <div class="checkbox" <%= @protocol.in_module? ? "data-action=check-item" : "" %>>
                       <label>
-                        <% if @protocol.in_module? %>
+                        <% if @protocol.in_module? && can_complete_or_checkbox_step?(@protocol) %>
                           <input type="checkbox"
                                  value=""
                                  data-link-url="<%=checklistitem_state_step_path(step) %>"