Abilities extended. Resources security improved

app/views/widgets/_project_member.html.haml

@@ -11,23 +11,19 @@
   %p 
     - if @project.issues_enabled
       %span
-        Assigned issues:
+        Assigned Issues:
         = current_user.assigned_issues.opened.count
       %br
     - if @project.merge_requests_enabled
       %span
-        Assigned merge request:
-        = current_user.assigned_merge_requests.opened.count
-      %br
-      %span
-        Your merge requests:
+        Assigned Requests:
         = current_user.assigned_merge_requests.opened.count
       %br
     %br
-    - if @project.merge_requests_enabled
+    - if @project.merge_requests_enabled && can?(current_user, :write_merge_request, @project)
       = link_to new_project_merge_request_path(@project), :title => "New Merge Request", :class => "btn small padded" do 
         Merge Request
-    - if @project.issues_enabled
+    - if @project.issues_enabled && can?(current_user, :write_issue, @project)
       = link_to new_project_issue_path(@project), :title => "New Issue", :class => "btn small" do 
         Issue