limiting drag&drop in backlog according to permissions