Feature #36: associate publications with projects
Project search fails to take access permissions into account
|Assignee:||Luis Figueira||% Done:|
When I choose to "add this publication to a project" from the publication details page, and start to type something that matches one or more private projects, I get the names of those private projects showing up in the search results list.
I can tell they're private because when I click on one I get a 403, but they shouldn't be displayed at all.
(In general, shouldn't the link_to_* functions be checking permissions themselves? Perhaps that's too big a philosophical question.)