(js) Check addressbook ACL prior to delete cards

NEWS

@@ -7,6 +7,7 @@ Enhancements
 Bug fixes
  - [web] include mail account name in form validation (#4532)
  - [web] calendar properties were not completely reset on cancel
+ - [web] check ACLs on address book prior to delete cards
 
 4.0.2 (2018-08-24)
 ------------------

UI/WebServerResources/js/Contacts/AddressBookController.js

@@ -228,7 +228,7 @@
     this.confirmDeleteSelectedCards = function($event) {
       var selectedCards = this.selectedFolder.$selectedCards();
 
-      if (_.size(selectedCards) > 0)
+      if (this.selectedFolder.acls.objectEraser && _.size(selectedCards) > 0)
         Dialog.confirm(l('Warning'),
                        l('Are you sure you want to delete the selected contacts?'),
                        { ok: l('Delete') })

UI/WebServerResources/js/Contacts/CardController.js

@@ -59,7 +59,7 @@
           key: hotkey,
           description: l('Delete'),
           callback: function($event) {
-            if (vm.currentFolder.$selectedCount() === 0)
+            if (vm.currentFolder.acls.objectEraser && vm.currentFolder.$selectedCount() === 0)
               confirmDelete();
             $event.preventDefault();
           }