From 7904569a0db393388fe1bd479fec9e3c8ebbc3b8 Mon Sep 17 00:00:00 2001
From: Patrick Smith <patrick+dds@promptworks.com>
Date: Wed, 6 Feb 2019 21:45:08 -0500
Subject: [PATCH] Add in some permission checks in portfolio nav header

---
 templates/portfolios/header.html | 28 ++++++++++++++++------------
 1 file changed, 16 insertions(+), 12 deletions(-)

diff --git a/templates/portfolios/header.html b/templates/portfolios/header.html
index e59a9f23..dbec6c77 100644
--- a/templates/portfolios/header.html
+++ b/templates/portfolios/header.html
@@ -25,23 +25,27 @@
     </div>
   </div>
   <div class='row links'>
-    {{ Link(
-      icon='chart',
-      text='Reports',
-      url=url_for("portfolios.portfolio_reports", portfolio_id=portfolio.id),
-      active=request.url_rule.endpoint == "portfolios.portfolio_reports",
-    ) }}
+    {% if user_can(permissions.VIEW_USAGE_DOLLARS) %}
+      {{ Link(
+        icon='chart',
+        text='Reports',
+        url=url_for("portfolios.portfolio_reports", portfolio_id=portfolio.id),
+        active=request.url_rule.endpoint == "portfolios.portfolio_reports",
+      ) }}
+    {% endif %}
     {{ Link(
       icon='dollar-sign',
       text='Funding',
       url=url_for("portfolios.portfolio_funding", portfolio_id=portfolio.id),
       active=request.url_rule.endpoint == "portfolios.portfolio_funding",
     ) }}
-    {{ Link(
-      icon='time',
-      text='Admin',
-      url=url_for("portfolios.portfolio", portfolio_id=portfolio.id),
-      active=request.url_rule.endpoint == "portfolios.portfolio",
-    ) }}
+    {% if user_can(permissions.EDIT_PORTFOLIO_INFORMATION) %}
+      {{ Link(
+        icon='time',
+        text='Admin',
+        url=url_for("portfolios.portfolio", portfolio_id=portfolio.id),
+        active=request.url_rule.endpoint == "portfolios.portfolio",
+      ) }}
+    {% endif %}
   </div>
 </div>