From b368d27d924307c2026ed9ffdb14b3f677c19d03 Mon Sep 17 00:00:00 2001
From: NAGGINDA MARTHA <marthamareal@gmail.com>
Date: Fri, 9 Jul 2021 17:23:18 +0300
Subject: [PATCH] [Fixes  #297] Enforce add_resourcebase permission control on
 apps list page (#298)

* use add_resource perm

* Update app_list.html

Co-authored-by: Giovanni Allegri <giohappy@gmail.com>
---
 .../templates/geonode-mapstore-client/app_list.html             | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/geonode_mapstore_client/templates/geonode-mapstore-client/app_list.html b/geonode_mapstore_client/templates/geonode-mapstore-client/app_list.html
index d02779a6b0..c35a44d568 100644
--- a/geonode_mapstore_client/templates/geonode-mapstore-client/app_list.html
+++ b/geonode_mapstore_client/templates/geonode-mapstore-client/app_list.html
@@ -6,7 +6,7 @@
 
 {% block body %}
   <div class="page-header">
-    {% if user.is_authenticated and not READ_ONLY_MODE %}
+    {% if user.is_authenticated and "add_resource" in user.perms%}
     <div class="dropdown" style="float: right;">
       <button class="btn btn-primary dropdown-toggle" type="button" id="create-new-app-dropdown-menu" data-toggle="dropdown" aria-haspopup="true" aria-expanded="true">
         {% trans "Create New" %} {% blocktrans %}{{GEONODE_APPS_NAME}}{% endblocktrans %}