feat(Project): Added permission check util and checked write permission for vulnerabilities rating

src/app/[locale]/projects/detail/[id]/components/ProjectDetailTab.tsx

@@ -14,7 +14,7 @@ import { useRouter, useSearchParams } from 'next/navigation'
 import { signOut, useSession } from 'next-auth/react'
 import { useTranslations } from 'next-intl'
 import { Breadcrumb, ShowInfoOnHover } from 'next-sw360'
-import { type JSX, useEffect, useState } from 'react'
+import { type JSX, useEffect, useMemo, useState } from 'react'
 import { Button, Col, Dropdown, ListGroup, Row, Spinner, Tab } from 'react-bootstrap'
 import Attachments from '@/components/Attachments/Attachments'
 import {
@@ -26,7 +26,8 @@ import {
     UserGroupType,
 } from '@/object-types'
 import MessageService from '@/services/message.service'
-import { ApiError, ApiUtils, CommonUtils } from '@/utils'
+import { ApiError, ApiUtils, CommonUtils, PermissionUtils } from '@/utils'
+import { RequestedAction } from '@/utils/permission.utils'
 import ImportSBOMMetadata from '../../../../../../object-types/cyclonedx/ImportSBOMMetadata'
 import ImportSBOMModal from '../../../components/ImportSBOMModal'
 import LinkProjects from '../../../components/LinkProjects'
@@ -62,6 +63,14 @@ export default function ViewProjects({ projectId }: { projectId: string }): JSX.
         importType: 'CycloneDx',
     })
 
+    const canChangeVulnerability = useMemo(
+        () => PermissionUtils.getStandardPermissions(RequestedAction.WRITE, summaryData?._embedded, session.data?.user),
+        [
+            summaryData,
+            session.data?.user,
+        ],
+    )
+
     useEffect(() => {
         if (session.status === 'unauthenticated') {
             signOut()
@@ -607,6 +616,7 @@ export default function ViewProjects({ projectId }: { projectId: string }): JSX.
                                                     enableVulnerabilitiesDisplay:
                                                         summaryData.enableVulnerabilitiesDisplay ?? false,
                                                 }}
+                                                canChangeVulnerability={canChangeVulnerability}
                                             />
                                         )}
                                     </Tab.Pane>

src/app/[locale]/projects/detail/[id]/components/ProjectVulnerabilities.tsx

@@ -35,7 +35,13 @@ const extractLinkedProjects = (projectPayload: Project[], projectData: ProjectDa
     }
 }
 
-export default function ProjectVulnerabilities({ projectData }: { projectData: ProjectData }): JSX.Element {
+export default function ProjectVulnerabilities({
+    projectData,
+    canChangeVulnerability = false,
+}: {
+    projectData: ProjectData
+    canChangeVulnerability?: boolean
+}): JSX.Element {
     const { data: session, status } = useSession()
     const [data, setData] = useState<ProjectData[]>([])
 
@@ -111,6 +117,7 @@ export default function ProjectVulnerabilities({ projectData }: { projectData: P
                         <VulnerabilityTab
                             projectData={e}
                             tabType={ProjectVulnerabilityTabType.PROJECT}
+                            canChangeVulnerability={canChangeVulnerability}
                         />
                     </Tab>
                 ))}

src/app/[locale]/projects/detail/[id]/components/VulnerabilityTab.tsx

@@ -39,9 +39,11 @@ type EmbeddedProjectVulnerabilitySummary = Embedded<ProjectVulnerability, 'sw360
 export default function VulnerabilityTab({
     projectData,
     tabType,
+    canChangeVulnerability = false,
 }: {
     projectData: ProjectData
     tabType: ProjectVulnerabilityTabType
+    canChangeVulnerability?: boolean
 }): JSX.Element {
     const t = useTranslations('default')
     const { data: session, status } = useSession()
@@ -435,7 +437,7 @@ export default function VulnerabilityTab({
                                 </div>
                             )}
                         </div>
-                        {tabType === ProjectVulnerabilityTabType.PROJECT && (
+                        {tabType === ProjectVulnerabilityTabType.PROJECT && canChangeVulnerability && (
                             <div className='mb-4 d-flex flex-row'>
                                 <label
                                     htmlFor='change_project_vul'

src/utils/index.ts

@@ -9,5 +9,6 @@
 
 import ApiUtils, { ApiError } from './api/api.util'
 import CommonUtils from './common.utils'
+import PermissionUtils from './permission.utils'
 
-export { ApiUtils, ApiError, CommonUtils }
+export { ApiUtils, ApiError, CommonUtils, PermissionUtils }