From 0cf45cb10148dc881629faa4e678a3874401dfb8 Mon Sep 17 00:00:00 2001
From: wangyidong <yidong@cnezsoft.com>
Date: Thu, 12 Jul 2018 13:14:46 +0800
Subject: [PATCH]  * adjust for create task in project for limited user.

---
 module/task/control.php    | 16 ++++++++++++++++
 module/task/lang/en.php    |  1 +
 module/task/lang/zh-cn.php |  1 +
 3 files changed, 18 insertions(+)

diff --git a/module/task/control.php b/module/task/control.php
index a4c0d879f1..ba8539f1cf 100644
--- a/module/task/control.php
+++ b/module/task/control.php
@@ -45,6 +45,14 @@ class task extends control
      */
     public function create($projectID = 0, $storyID = 0, $moduleID = 0, $taskID = 0, $todoID = 0)
     {
+        $this->project->getLimitedProject();
+        $limitedProjects = !empty($_SESSION['limitedProjects']) ? $_SESSION['limitedProjects'] : '';
+        if(strpos(",{$limitedProjects},", ",$projectID,") !== false)
+        {
+            echo js::alert($this->lang->task->createDenied);
+            die(js::locate($this->createLink('project', 'task', "projectID=$projectID")));
+        }
+
         $task = new stdClass();
         $task->module     = $moduleID;
         $task->assignedTo = '';
@@ -195,6 +203,14 @@ class task extends control
      */
     public function batchCreate($projectID = 0, $storyID = 0, $moduleID = 0, $taskID = 0, $iframe = 0)
     {
+        $this->project->getLimitedProject();
+        $limitedProjects = !empty($_SESSION['limitedProjects']) ? $_SESSION['limitedProjects'] : '';
+        if(strpos(",{$limitedProjects},", ",$projectID,") !== false)
+        {
+            echo js::alert($this->lang->task->createDenied);
+            die(js::locate($this->createLink('project', 'task', "projectID=$projectID")));
+        }
+
         $project   = $this->project->getById($projectID);
         $taskLink  = $this->createLink('project', 'browse', "projectID=$projectID&tab=task");
         $storyLink = $this->session->storyList ? $this->session->storyList : $this->createLink('project', 'story', "projectID=$projectID");
diff --git a/module/task/lang/en.php b/module/task/lang/en.php
index 38add30f65..28489151c8 100644
--- a/module/task/lang/en.php
+++ b/module/task/lang/en.php
@@ -173,6 +173,7 @@ $lang->task->noticeSaveRecord      = 'Your Hour is not saved. Please save it fir
 $lang->task->commentActions        = '%s. %s, commented by <strong>%s</strong>.';
 $lang->task->deniedNotice          = 'Only the %s can %s the task.';
 $lang->task->noTask                = 'No tasks. ';
+$lang->task->createDenied          = 'Create task is denied in this project';
 
 $lang->task->error = new stdclass();
 $lang->task->error->consumedNumber   = '"Consumed" must be numbers.';
diff --git a/module/task/lang/zh-cn.php b/module/task/lang/zh-cn.php
index dee4bdf397..41b2782cbd 100644
--- a/module/task/lang/zh-cn.php
+++ b/module/task/lang/zh-cn.php
@@ -173,6 +173,7 @@ $lang->task->noticeSaveRecord      = '您有尚未保存的工时记录，请先
 $lang->task->commentActions        = '%s. %s, 由 <strong>%s</strong> 添加备注。';
 $lang->task->deniedNotice          = '当前任务只有%s才可以%s。';
 $lang->task->noTask                = '暂时没有任务。';
+$lang->task->createDenied          = '你不能在该项目添加任务';
 
 $lang->task->error                   = new stdclass();
 $lang->task->error->consumedNumber   = '"已经消耗"必须为数字';