fix: make request action sheet permission sensitive

(cherry picked from commit 7aa26e6)

frontend/src/components/RequestActionSheet.vue

@@ -80,7 +80,7 @@
 		/>
 
 		<div
-			v-else-if="['Open', 'Draft'].includes(document?.doc?.[approvalField])"
+			v-else-if="['Open', 'Draft'].includes(document?.doc?.[approvalField]) && hasPermission('approval')"
 			class="flex w-full flex-row items-center justify-between gap-3 sticky bottom-0 border-t z-[100] p-4"
 		>
 			<Button
@@ -111,7 +111,8 @@
 		<div
 			v-else-if="
 				document?.doc?.docstatus === 0 &&
-				['Approved', 'Rejected'].includes(document?.doc?.[approvalField])
+				['Approved', 'Rejected'].includes(document?.doc?.[approvalField]) &&
+				hasPermission('submit')
 			"
 			class="flex w-full flex-row items-center justify-between gap-3 sticky bottom-0 border-t z-[100] p-4"
 		>
@@ -125,7 +126,7 @@
 		</div>
 
 		<div
-			v-else-if="document?.doc?.docstatus === 1"
+			v-else-if="document?.doc?.docstatus === 1 && hasPermission('cancel')"
 			class="flex w-full flex-row items-center justify-between gap-3 sticky bottom-0 border-t z-[100] p-4"
 		>
 			<Button
@@ -210,6 +211,24 @@ const attachedFiles = createResource({
 	},
 })
 
+const docPermissions = createResource({
+	url: "frappe.client.get_doc_permissions",
+	params: { doctype: props.modelValue.doctype, docname: props.modelValue.name },
+	auto: true,
+})
+
+const permittedWriteFields = createResource({
+	url: "hrms.api.get_permitted_fields_for_write",
+	params: { doctype: props.modelValue.doctype },
+	auto: true,
+})
+
+function hasPermission(action) {
+	if (action === "approval")
+		return permittedWriteFields.data?.includes(approvalField.value)
+	return docPermissions.data?.permissions[action]
+}
+
 const currency = computed(() => {
 	let docCurrency = document?.doc?.currency