[#5421] Only assign the issue deliverable when a user has permission.

lib/redmine_contracts/hooks/controller_issues_edit_before_save_hook.rb

@@ -4,14 +4,16 @@ module RedmineContracts
       def controller_issues_edit_before_save(context={})
 
         if context[:params] && context[:params][:issue]
-          if context[:params][:issue][:deliverable_id].present?
-            deliverable = Deliverable.find_by_id(context[:params][:issue][:deliverable_id])
-            if deliverable.contract.project == context[:issue].project
-              context[:issue].deliverable = deliverable
-            end
+          if User.current.allowed_to?(:assign_deliverable_to_issue, context[:issue].project)
+            if context[:params][:issue][:deliverable_id].present?
+              deliverable = Deliverable.find_by_id(context[:params][:issue][:deliverable_id])
+              if deliverable.contract.project == context[:issue].project
+                context[:issue].deliverable = deliverable
+              end
 
-          else
-            context[:issue].deliverable = nil
+            else
+              context[:issue].deliverable = nil
+            end
           end
 
         end