diff --git a/routers/api/v1/repo/issue.go b/routers/api/v1/repo/issue.go index b11e889eb5..22b7bda6ac 100644 --- a/routers/api/v1/repo/issue.go +++ b/routers/api/v1/repo/issue.go @@ -845,6 +845,11 @@ func EditIssue(ctx *context.APIContext) { // Update or remove the deadline, only if set and allowed if (form.Deadline != nil || form.RemoveDeadline != nil) && canWrite { + if ctx.Doer.IsRestricted && !setting.RestrictedUser.AllowEditDueDate { + ctx.APIError(http.StatusForbidden, "restricted users cannot modify due dates") + return + } + var deadlineUnix timeutil.TimeStamp if form.RemoveDeadline == nil || !*form.RemoveDeadline {