fix(AuditTrail): allow to see action option only if user have view au…

src/OrchardCore.Modules/OrchardCore.Contents/AuditTrail/Drivers/AuditTrailContentsDriver.cs

@@ -1,3 +1,5 @@
+using Microsoft.AspNetCore.Authorization;
+using Microsoft.AspNetCore.Http;
 using OrchardCore.ContentManagement;
 using OrchardCore.ContentManagement.Display.ContentDisplay;
 using OrchardCore.ContentManagement.Display.ViewModels;
@@ -8,10 +10,22 @@ namespace OrchardCore.Contents.AuditTrail.Drivers
 {
  public class AuditTrailContentsDriver : ContentDisplayDriver
  {
- // TODO: What permission are we looking for here?
+ private readonly IHttpContextAccessor _httpContextAccessor;
+ private readonly IAuthorizationService _authorizationService;
+
+ public AuditTrailContentsDriver(
+ IHttpContextAccessor httpContextAccessor,
+ IAuthorizationService authorizationService)
+ {
+ _httpContextAccessor = httpContextAccessor;
+ _authorizationService = authorizationService;
+ }
+
  public override IDisplayResult Display(ContentItem contentItem, IUpdateModel updater)
  {
- return Initialize<ContentItemViewModel>("AuditTrailContentsAction_SummaryAdmin", m => m.ContentItem = contentItem).Location("SummaryAdmin", "ActionsMenu:10");
+ return Initialize<ContentItemViewModel>("AuditTrailContentsAction_SummaryAdmin", m => m.ContentItem = contentItem)
+ .Location("SummaryAdmin", "ActionsMenu:10")
+ .RenderWhen(() => _authorizationService.AuthorizeAsync(_httpContextAccessor.HttpContext?.User, OrchardCore.AuditTrail.AuditTrailPermissions.ViewAuditTrail));
  }
  }
 }