Merge branch 'release/17.3' into dev

app/components/open_project/common/inplace_edit_fields/display_fields/rich_text_area_component.rb

@@ -49,7 +49,7 @@ module OpenProject
                                                                        field_value,
                                                                        lines: 3)
                   else
-                    format_text(field_value)
+                    format_text(field_value, object: model)
                   end
                 else
                   t("placeholders.default")

config/initializers/permissions.rb

@@ -249,7 +249,8 @@ Rails.application.reloader.to_prepare do
                      require: :member
 
       map.permission :add_subprojects,
-                     { projects: %i[new create] },
+                     { projects: %i[new create],
+                       "projects/identifier_suggestion": %i[show] },
                      permissible_on: :project,
                      require: :member
 

frontend/src/global_styles/primer/_overrides.sass

@@ -183,5 +183,5 @@ ul.SegmentedControl,
       grid-template-columns: min-content 1fr min-content
       grid-template-rows: min-content min-content
 
-    & .Banner-actions
-      margin: var(--base-size-8) 0 0 var(--base-size-8)
+      & .Banner-actions
+        margin: var(--base-size-8) 0 0 var(--base-size-8)

spec/requests/projects/identifier_suggestion_spec.rb

@@ -71,6 +71,26 @@ RSpec.describe "GET /projects/identifier_suggestion", type: :rails_request do
         expect(response).to have_http_status(:unauthorized).or have_http_status(:redirect)
       end
     end
+
+    context "when user has no permissions" do
+      current_user { create(:user) }
+
+      it "returns forbidden" do
+        get "/projects/identifier_suggestion", params: { name: "Test" }, as: :json
+        expect(response).to have_http_status(:forbidden)
+      end
+    end
+
+    context "when user has add_subprojects permission on a project" do
+      let(:project) { create(:project, identifier: "PRNT") }
+
+      current_user { create(:user, member_with_permissions: { project => %i[add_subprojects] }) }
+
+      it "returns a suggestion" do
+        get "/projects/identifier_suggestion", params: { name: "Test" }, as: :json
+        expect(response).to have_http_status(:ok)
+      end
+    end
   end
 
   context "with classic identifiers", with_settings: { work_packages_identifier: "classic" } do