Import from parent project list doesn't check permissions

[m6121]

Description / Beschreibung

The list of projects in the import from parent project selection displays all parent projects independent of the user permissions.

Expected behaviour / Erwartetes Verhalten

Import from parent project should display only projects where users have permissions to import data.

Steps to reproduce / Schritte zum Reproduzieren

1. Load the dev fixtures in the latest RDMO Version: python manage.py loaddata ../rdmo/testing/fixtures/*
2. Log in to manager account.
3. Open Project "Child 1" or "Child 11"
4. List contains "Parent" although user does not have permissions.
5. When chosing "Parent" and trying to get to next step, RDMO displays "Forbidden", but I think it would be nicer if the option would not be present in the list.

[MyPyDavid]

Do you mean the project that is called "Parent" in the Project hierarchy of Child1 or Child11 that is "Forbidden" for Manni Manager?
I think so too that this project "Parent" should not be displayed (in the import dropdown and in the project header hierarchy) since the user "manager" is not even a member of the project "Parent".
Templates:

• rdmo/rdmo/projects/templates/projects/project_detail_sidebar.html

  Line 152 in ef6e1f8

  {% if settings.NESTED_PROJECTS and project.get_ancestors %}

• rdmo/rdmo/projects/templates/projects/project_detail_header_hierarchy.html

  Line 13 in ef6e1f8

  {% for node in project_tree %}

[m6121]

Do you mean the project that is called "Parent" in the Project hierarchy of Child1 or Child11 that is "Forbidden" for Manni Manager?

Yes, exactly! Sorry for the confusing description, I edited my issue.