Moved checking for if the user has write acces to middleware

routers/repo/issue.go

@@ -1480,13 +1480,6 @@ func UpdateDeadline(ctx *context.Context, form auth.DeadlineForm) {
 		return
 	}
 
-	// Check if the user has at least write access to the repo
-	if !ctx.Repo.IsWriter() {
-		ctx.Flash.Error(ctx.Tr("repo.issues.due_date_not_writer"))
-		ctx.Redirect(fmt.Sprintf("%s/issues/%d", ctx.Repo.RepoLink, issue.Index))
-		return
-	}
-
 	// Make unix of deadline string
 	deadline, err := time.ParseInLocation("2006-01-02", form.DateString, time.Local)
 	if err != nil {
@@ -1515,13 +1508,6 @@ func RemoveDeadline(ctx *context.Context) {
 		return
 	}
 
-	// Check if the user has at least write access to the repo
-	if !ctx.Repo.IsWriter() {
-		ctx.Flash.Error(ctx.Tr("repo.issues.due_date_not_writer"))
-		ctx.Redirect(fmt.Sprintf("%s/issues/%d", ctx.Repo.RepoLink, issue.Index))
-		return
-	}
-
 	if err := models.UpdateIssueDeadline(issue, 0, ctx.User); err != nil {
 		ctx.Flash.Error(ctx.Tr("repo.issues.error_removing_due_date"))
 	}

routers/routes/routes.go

@@ -496,8 +496,8 @@ func RegisterRoutes(m *macaron.Macaron) {
 					})
 				})
 				m.Post("/reactions/:action", bindIgnErr(auth.ReactionForm{}), repo.ChangeIssueReaction)
-				m.Post("/deadline/update", bindIgnErr(auth.DeadlineForm{}), repo.UpdateDeadline)
-				m.Post("/deadline/remove", repo.RemoveDeadline)
+				m.Post("/deadline/update", reqRepoWriter, bindIgnErr(auth.DeadlineForm{}), repo.UpdateDeadline)
+				m.Post("/deadline/remove", reqRepoWriter, repo.RemoveDeadline)
 			})
 
 			m.Post("/labels", reqRepoWriter, repo.UpdateIssueLabel)