Hide some disabled forms for anonymous board viewers

Fixes #288
Fixes #289
Fixes #290

client/components/cards/attachments.jade

@@ -26,15 +26,17 @@ template(name="attachmentsGalery")
             a.js-download(href="{{url download=true}}")
               i.fa.fa-download
               | {{_ 'download'}}
-            if isImage
+            if currentUser.isBoardMember
-              a(class="{{#if $eq ../coverId _id}}js-remove-cover{{else}}js-add-cover{{/if}}")
+              if isImage
-                i.fa.fa-thumb-tack
+                a(class="{{#if $eq ../coverId _id}}js-remove-cover{{else}}js-add-cover{{/if}}")
-                if($eq ../coverId _id)
+                  i.fa.fa-thumb-tack
-                  | {{_ 'remove-cover'}}
+                  if($eq ../coverId _id)
-                else
+                    | {{_ 'remove-cover'}}
-                  | {{_ 'add-cover'}}
+                  else
-            a.js-confirm-delete
+                    | {{_ 'add-cover'}}
-              i.fa.fa-close
+              a.js-confirm-delete
-              | {{_ 'delete'}}
+                i.fa.fa-close
+                | {{_ 'delete'}}
 
-    a.attachment-item.add-attachment.js-add-attachment {{_ 'add-attachment' }}
+    if currentUser.isBoardMember
+      a.attachment-item.add-attachment.js-add-attachment {{_ 'add-attachment' }}

client/components/cards/cardDetails.jade

@@ -23,16 +23,18 @@ template(name="cardDetails")
         each members
           +userAvatar(userId=this cardId=../_id)
           | {{! XXX Hack to hide syntaxic coloration /// }}
-        a.member.add-member.card-details-item-add-button.js-add-members(title="{{_ 'card-members-title'}}")
+        if currentUser.isBoardMember
-          i.fa.fa-plus
+          a.member.add-member.card-details-item-add-button.js-add-members(title="{{_ 'card-members-title'}}")
+            i.fa.fa-plus
 
       .card-details-item.card-details-item-labels
         h3.card-details-item-title {{_ 'labels'}}
-        a.js-add-labels(title="{{_ 'card-labels-title'}}")
+        a(class="{{#if currentUser.isBoardMember}}js-add-labels{{else}}is-disabled{{/if}}" title="{{_ 'card-labels-title'}}")
           each labels
             span.card-label(class="card-label-{{color}}" title=name)= name
-        a.card-label.add-label.js-add-labels(title="{{_ 'card-labels-title'}}")
+        if currentUser.isBoardMember
-          i.fa.fa-plus
+          a.card-label.add-label.js-add-labels(title="{{_ 'card-labels-title'}}")
+            i.fa.fa-plus
 
     //- XXX We should use "editable" to avoid repetiting ourselves
     if currentUser.isBoardMember

client/components/sidebar/sidebar.jade

@@ -41,7 +41,8 @@ template(name="labelsWidget")
       | {{_ 'labels'}}
     .board-widget-content
       each currentBoard.labels
-          a.card-label(class="card-label-{{color}}").js-label
+          a.card-label(class="card-label-{{color}}"
+            class="{{#if currentUser.isBoardMember}}js-add-labels{{/if}}")
             span.card-label-name= name
       if currentUser.isBoardAdmin
         a.card-label.add-label.js-add-label