Fixed: the link to delete issue relations is displayed even if the user is not...

Fixed: the link to delete issue relations is displayed even if the user is not authorized to delete relations

git-svn-id: http://redmine.rubyforge.org/svn/trunk@614 e93f8b46-1217-0410-a6f0-8f06a7374b81

app/views/issues/_relations.rhtml

@@ -8,9 +8,9 @@
 <td><div class="square" style="background:#<%= relation.other_issue(@issue).status.html_color %>;"></div> <%= relation.other_issue(@issue).status.name %></td>
 <td><%= format_date(relation.other_issue(@issue).start_date) %></td>
 <td><%= format_date(relation.other_issue(@issue).due_date) %></td>
-<td><%= link_to_remote image_tag('delete.png'), { :url => {:controller => 'issue_relations', :action => 'destroy', :issue_id => @issue, :id => relation},                                              
+<td><%= link_to_remote(image_tag('delete.png'), { :url => {:controller => 'issue_relations', :action => 'destroy', :issue_id => @issue, :id => relation},                                              
                                                   :method => :post
-                                                }, :title => l(:label_relation_delete) %></td>
+                                                }, :title => l(:label_relation_delete)) if authorize_for('issue_relations', 'destroy') %></td>
 </tr>
 <% end %>
 </table>