The save and submit controller actions need to be checked for ACL as well (and anything they use, i.e. the model or table classes). Just on a quick check there's this block which might mean there are more checks to update.
Also, as is this is giving both label and milestone access; not sure if that's what you're intending since the title and description only talk about labels.
The save and submit controller actions need to be checked for ACL as well (and anything they use, i.e. the model or table classes). Just on a quick check there's this block which might mean there are more checks to update.
Also, as is this is giving both label and milestone access; not sure if that's what you're intending since the title and description only talk about labels.