Implement permission checks for adding and deleting line items in issue forms

lib/line_items/hooks/view_hook_listener.rb

@@ -24,19 +24,19 @@ module LineItems
         ])
       end
 
+      # Add the line items form to the issue edit page
       def view_issues_edit_notes_bottom(context = {})
         return if context[:issue].closed?
-        context[:controller].send(:render_to_string, {
-          partial: 'line_items/issue_form',
-            locals: {
-              f: context[:form]
-            } 
-          }
-        )
+        return unless User.current.allowed_to?(:edit_line_items, nil, global: true)
+        context[:controller].send(:render_to_string, { partial: 'line_items/issue_form', locals: { f: context[:form] } })
+      end
+
+      # Add the line items to the issue view page
+      def view_issues_show_description_bottom (context = {})
+        return unless User.current.allowed_to?(:view_line_items, nil, global: true)
+        context[:controller].send(:render_to_string, { partial: 'line_items/issue_line_items', locals: { issue: context[:issue] } })
       end
 
-      render_on :view_issues_show_description_bottom , partial: 'line_items/issue_line_items'
-      
     end
   end
 end

lib/redmine_qbo_line_items.rb

@@ -12,10 +12,18 @@ module RedmineQboLineItems
 
   def self.setup
    unless Issue.ancestors.include?(LineItems::Patches::IssuePatch)
+      # Patches
       Issue.prepend LineItems::Patches::IssuePatch
+
+      # Hooks
       LineItems::Hooks::IssuesSaveHookListener
       LineItems::Hooks::QboHookListener
       LineItems::Hooks::ViewHookListener
+
+      # Administration menu extension
+      Redmine::MenuManager.map :admin_menu do |menu|
+        menu.push :redmine_qbo_lineitems, { controller: 'items', action: 'index' }, icon: 'list', caption: :label_items, html: { class: 'icon icon-list' }
+      end
     end
   end
 end