Snapshot actions available only for users with appropriate permission

Author: oleg-odysseus

js/pages/concept-sets/conceptset-manager.html

@@ -26,7 +26,7 @@
         <!-- ko if: $component.currentConceptSet().id != null && $component.currentConceptSet().id != 0 -->
         <button type="button" class="btn btn-primary" data-bind="click: () => isTagsModalShown(!isTagsModalShown()), visible: canEdit() && !previewVersion(), css: { disabled: isProcessing() }, title: ko.i18n('common.tags', 'Tags')"><i class="fa fa-tags"></i></button>
         <button type="button" class="btn btn-primary" data-bind="visible: !previewVersion(), click: optimize, css: { disabled: !canOptimize() || isProcessing() }, text: ko.i18n('cs.manager.optimize', 'Optimize')"></button>
-        <button type="button" class="btn btn-primary" data-bind="click: lockOrUnlockSnapshot,
+        <button type="button" class="btn btn-primary" data-bind="visible: isAllowedSnapshotActions(), click: lockOrUnlockSnapshot,
                        css: {
                             'btn-lock-locked': isLocked(),
                             'btn-lock-unlocked': !isLocked(),

js/pages/concept-sets/conceptset-manager.js

@@ -86,6 +86,9 @@ define([
 			this.currentConceptSetMode = sharedState.currentConceptSetMode;
 			this.isOptimizeModalShown = ko.observable(false);
 			this.isSnapshotLockModalShown = ko.observable(false);
+			this.isAllowedSnapshotActions = ko.computed(() => {
+				return authApi.isPermitted('conceptset:*:snapshot:post');
+			})
 			this.defaultName = ko.unwrap(globalConstants.newEntityNames.conceptSet);
 			this.loading = ko.observable();
 			this.optimizeLoading = ko.observable();