From 01348187c848e096d5bcf723974bd940fb42a4c7 Mon Sep 17 00:00:00 2001
From: snipe <snipe@snipe.net>
Date: Sun, 5 Jun 2022 22:41:53 -0700
Subject: [PATCH] Fixed  #11224 - only show menu options if the user is allowed

Signed-off-by: snipe <snipe@snipe.net>
---
 resources/views/partials/asset-bulk-actions.blade.php | 10 +++++++---
 1 file changed, 7 insertions(+), 3 deletions(-)

diff --git a/resources/views/partials/asset-bulk-actions.blade.php b/resources/views/partials/asset-bulk-actions.blade.php
index 4a24a34ced..f6678d4478 100644
--- a/resources/views/partials/asset-bulk-actions.blade.php
+++ b/resources/views/partials/asset-bulk-actions.blade.php
@@ -12,11 +12,15 @@
         </span>
     </label>
     <select name="bulk_actions" class="form-control select2" aria-label="bulk_actions">
-        <option value="edit">{{ trans('button.edit') }}</option>
-        <option value="delete">{{ trans('button.delete') }}</option>
+        @can('update', \App\Models\Asset::class)
+            <option value="edit">{{ trans('button.edit') }}</option>
+        @endcan
+        @can('delete', \App\Models\Asset::class)
+            <option value="delete">{{ trans('button.delete') }}</option>
+        @endcan
         <option value="labels">{{ trans_choice('button.generate_labels', 2) }}</option>
     </select>
 
     <button class="btn btn-primary" id="bulkEdit" disabled>{{ trans('button.go') }}</button>
     {{ Form::close() }}
-</div>
\ No newline at end of file
+</div>