From da48a7507334e40adc21aa722756d27980532b02 Mon Sep 17 00:00:00 2001
From: FreneticScribbler <aj@aronajones.com>
Date: Tue, 18 Feb 2020 16:00:33 +0000
Subject: [PATCH] FIX: Hide asset detail buttons for basic users

---
 assets/templates/partials/asset_buttons.html | 52 ++++++++++----------
 1 file changed, 27 insertions(+), 25 deletions(-)

diff --git a/assets/templates/partials/asset_buttons.html b/assets/templates/partials/asset_buttons.html
index e9a4e43e..d947e57b 100644
--- a/assets/templates/partials/asset_buttons.html
+++ b/assets/templates/partials/asset_buttons.html
@@ -1,26 +1,28 @@
-{% if edit and object %}
-<!--edit-->
-<button type="submit" class="btn btn-success"><i class="glyphicon glyphicon-floppy-disk"></i> Save</button>
-<a class="btn btn-default" href="{% url 'asset_duplicate' object.pk %}"><i class="glyphicon glyphicon-duplicate"></i> Duplicate</a>
-{% elif duplicate %}
-<!--duplicate-->
-<button type="submit" class="btn btn-success"><i class="glyphicon glyphicon-ok-sign"></i> Create Duplicate</button>
-{% elif create %}
-<!--create-->
-<button type="submit" class="btn btn-success"><i class="glyphicon glyphicon-floppy-disk"></i> Save</button>
-{% else %}
-<!--detail view-->
-<div class="btn-group">
-    <a href="{% url 'asset_update' object.asset_id %}" class="btn btn-default"><i class="glyphicon glyphicon-edit"></i> Edit</a>
-    <a class="btn btn-default" href="{% url 'asset_duplicate' object.asset_id %}"><i class="glyphicon glyphicon-duplicate"></i> Duplicate</a>
-    <a type="button" class="btn btn-info modal-href" href="{% url 'asset_audit' object.asset_id %}"><i class="glyphicon glyphicon-object-align-left"></i> Audit</a>
-</div>
-{% endif %}
-{% if create or edit or duplicate %}
-<br>
-<button type="reset" class="btn btn-link" onclick="
-{%if duplicate%}
-{% url 'asset_detail' previous_asset_id %}
-{%else%}
-history.back(){%endif%}">Cancel</button>
+{% if perms.assets.change_asset %}
+    {% if edit and object %}
+    <!--edit-->
+    <button type="submit" class="btn btn-success"><i class="glyphicon glyphicon-floppy-disk"></i> Save</button>
+    <a class="btn btn-default" href="{% url 'asset_duplicate' object.pk %}"><i class="glyphicon glyphicon-duplicate"></i> Duplicate</a>
+    {% elif duplicate %}
+    <!--duplicate-->
+    <button type="submit" class="btn btn-success"><i class="glyphicon glyphicon-ok-sign"></i> Create Duplicate</button>
+    {% elif create %}
+    <!--create-->
+    <button type="submit" class="btn btn-success"><i class="glyphicon glyphicon-floppy-disk"></i> Save</button>
+    {% else %}
+    <!--detail view-->
+    <div class="btn-group">
+        <a href="{% url 'asset_update' object.asset_id %}" class="btn btn-default"><i class="glyphicon glyphicon-edit"></i> Edit</a>
+        <a class="btn btn-default" href="{% url 'asset_duplicate' object.asset_id %}"><i class="glyphicon glyphicon-duplicate"></i> Duplicate</a>
+        <a type="button" class="btn btn-info" href="{% url 'asset_audit' object.asset_id %}"><i class="glyphicon glyphicon-object-align-left"></i> Audit</a>
+    </div>
+    {% endif %}
+    {% if create or edit or duplicate %}
+    <br>
+    <button type="reset" class="btn btn-link" onclick="
+    {%if duplicate%}
+    {% url 'asset_detail' previous_asset_id %}
+    {%else%}
+    history.back(){%endif%}">Cancel</button>
+    {% endif %}
 {% endif %}