@fleetbase/fleetops-engine 0.6.69 → 0.6.70

package/addon/controllers/connectivity/sensors/index.js

@@ -92,12 +92,14 @@ export default class ConnectivitySensorsIndexController extends Controller {
             type: 'primary',
             icon: 'plus',
             onClick: this.sensorActions.transition.create,
+            permission: 'fleet-ops create sensor',
         },
         {
             text: this.intl.t('common.import'),
             type: 'magic',
             icon: 'upload',
             onClick: this.sensorActions.import,
+            permission: 'fleet-ops import sensor',
         },
         {
             text: this.intl.t('common.export'),
@@ -105,6 +107,7 @@ export default class ConnectivitySensorsIndexController extends Controller {
             iconClass: 'rotate-icon-45',
             wrapperClass: 'hidden md:flex',
             onClick: this.sensorActions.export,
+            permission: 'fleet-ops export sensor',
         },
     ];
 
@@ -114,6 +117,7 @@ export default class ConnectivitySensorsIndexController extends Controller {
             label: 'Delete selected...',
             class: 'text-red-500',
             fn: this.sensorActions.bulkDelete,
+            permission: 'fleet-ops delete sensor',
         },
     ];
 

package/addon/controllers/connectivity/telematics/index.js

@@ -38,12 +38,14 @@ export default class ConnectivityTelematicsIndexController extends Controller {
             type: 'primary',
             icon: 'plus',
             onClick: this.telematicActions.transition.create,
+            permission: 'fleet-ops create telematic',
         },
         {
             text: this.intl.t('common.import'),
             type: 'magic',
             icon: 'upload',
             onClick: this.telematicActions.import,
+            permission: 'fleet-ops import telematic',
         },
         {
             text: this.intl.t('common.export'),
@@ -51,6 +53,7 @@ export default class ConnectivityTelematicsIndexController extends Controller {
             iconClass: 'rotate-icon-45',
             wrapperClass: 'hidden md:flex',
             onClick: this.telematicActions.export,
+            permission: 'fleet-ops export telematic',
         },
     ];
 
@@ -60,6 +63,7 @@ export default class ConnectivityTelematicsIndexController extends Controller {
             label: 'Delete selected...',
             class: 'text-red-500',
             fn: this.telematicActions.bulkDelete,
+            permission: 'fleet-ops delete telematic',
         },
     ];
 

package/addon/controllers/maintenance/equipment/index.js

@@ -46,14 +46,21 @@ export default class MaintenanceEquipmentIndexController extends Controller {
                 helpText: 'Change the layout',
             },
             { icon: 'refresh', onClick: this.equipmentActions.refresh, helpText: this.intl.t('common.refresh') },
-            { text: this.intl.t('common.new'), type: 'primary', icon: 'plus', onClick: this.equipmentActions.transition.create },
-            { text: this.intl.t('common.import'), type: 'magic', icon: 'upload', onClick: this.equipmentActions.import },
-            { text: this.intl.t('common.export'), icon: 'long-arrow-up', iconClass: 'rotate-icon-45', wrapperClass: 'hidden md:flex', onClick: this.equipmentActions.export },
+            { text: this.intl.t('common.new'), type: 'primary', icon: 'plus', onClick: this.equipmentActions.transition.create, permission: 'fleet-ops create equipment' },
+            { text: this.intl.t('common.import'), type: 'magic', icon: 'upload', onClick: this.equipmentActions.import, permission: 'fleet-ops import equipment' },
+            {
+                text: this.intl.t('common.export'),
+                icon: 'long-arrow-up',
+                iconClass: 'rotate-icon-45',
+                wrapperClass: 'hidden md:flex',
+                onClick: this.equipmentActions.export,
+                permission: 'fleet-ops export equipment',
+            },
         ];
     }
 
     get bulkActions() {
-        return [{ label: 'Delete selected...', class: 'text-red-500', fn: this.equipmentActions.bulkDelete }];
+        return [{ label: 'Delete selected...', class: 'text-red-500', fn: this.equipmentActions.bulkDelete, permission: 'fleet-ops delete equipment' }];
     }
 
     get columns() {

package/addon/controllers/maintenance/inspection-forms/index.js

@@ -17,12 +17,12 @@ export default class MaintenanceInspectionFormsIndexController extends Controlle
     get actionButtons() {
         return [
             { icon: 'refresh', onClick: this.inspectionFormActions.refresh, helpText: this.intl.t('common.refresh') },
-            { text: this.intl.t('common.new'), type: 'primary', icon: 'plus', onClick: this.inspectionFormActions.transition.create },
+            { text: this.intl.t('common.new'), type: 'primary', icon: 'plus', onClick: this.inspectionFormActions.transition.create, permission: 'fleet-ops create inspection-form' },
         ];
     }
 
     get bulkActions() {
-        return [{ label: 'Delete selected...', class: 'text-red-500', fn: this.inspectionFormActions.bulkDelete }];
+        return [{ label: 'Delete selected...', class: 'text-red-500', fn: this.inspectionFormActions.bulkDelete, permission: 'fleet-ops delete inspection-form' }];
     }
 
     get columns() {

package/addon/controllers/maintenance/inspection-submissions/index.js

@@ -23,12 +23,18 @@ export default class MaintenanceInspectionSubmissionsIndexController extends Con
     get actionButtons() {
         return [
             { icon: 'refresh', onClick: this.inspectionSubmissionActions.refresh, helpText: this.intl.t('common.refresh') },
-            { text: this.intl.t('common.new'), type: 'primary', icon: 'plus', onClick: this.inspectionSubmissionActions.transition.create },
+            {
+                text: this.intl.t('common.new'),
+                type: 'primary',
+                icon: 'plus',
+                onClick: this.inspectionSubmissionActions.transition.create,
+                permission: 'fleet-ops create inspection-submission',
+            },
         ];
     }
 
     get bulkActions() {
-        return [{ label: 'Delete selected...', class: 'text-red-500', fn: this.inspectionSubmissionActions.bulkDelete }];
+        return [{ label: 'Delete selected...', class: 'text-red-500', fn: this.inspectionSubmissionActions.bulkDelete, permission: 'fleet-ops delete inspection-submission' }];
     }
 
     get columns() {

package/addon/controllers/maintenance/maintenances/index.js

@@ -31,12 +31,14 @@ export default class MaintenanceMaintenancesIndexController extends Controller {
                 type: 'primary',
                 icon: 'plus',
                 onClick: this.maintenanceActions.transition.create,
+                permission: 'fleet-ops create maintenance',
             },
             {
                 text: this.intl.t('common.import'),
                 type: 'magic',
                 icon: 'upload',
                 onClick: this.maintenanceActions.import,
+                permission: 'fleet-ops import maintenance',
             },
             {
                 text: this.intl.t('common.export'),
@@ -44,6 +46,7 @@ export default class MaintenanceMaintenancesIndexController extends Controller {
                 iconClass: 'rotate-icon-45',
                 wrapperClass: 'hidden md:flex',
                 onClick: this.maintenanceActions.export,
+                permission: 'fleet-ops export maintenance',
             },
         ];
     }
@@ -55,6 +58,7 @@ export default class MaintenanceMaintenancesIndexController extends Controller {
                 label: 'Delete selected...',
                 class: 'text-red-500',
                 fn: this.maintenanceActions.bulkDelete,
+                permission: 'fleet-ops delete maintenance',
             },
         ];
     }

package/addon/controllers/maintenance/parts/index.js

@@ -46,14 +46,21 @@ export default class MaintenancePartsIndexController extends Controller {
                 helpText: 'Change the layout',
             },
             { icon: 'refresh', onClick: this.partActions.refresh, helpText: this.intl.t('common.refresh') },
-            { text: this.intl.t('common.new'), type: 'primary', icon: 'plus', onClick: this.partActions.transition.create },
-            { text: this.intl.t('common.import'), type: 'magic', icon: 'upload', onClick: this.partActions.import },
-            { text: this.intl.t('common.export'), icon: 'long-arrow-up', iconClass: 'rotate-icon-45', wrapperClass: 'hidden md:flex', onClick: this.partActions.export },
+            { text: this.intl.t('common.new'), type: 'primary', icon: 'plus', onClick: this.partActions.transition.create, permission: 'fleet-ops create part' },
+            { text: this.intl.t('common.import'), type: 'magic', icon: 'upload', onClick: this.partActions.import, permission: 'fleet-ops import part' },
+            {
+                text: this.intl.t('common.export'),
+                icon: 'long-arrow-up',
+                iconClass: 'rotate-icon-45',
+                wrapperClass: 'hidden md:flex',
+                onClick: this.partActions.export,
+                permission: 'fleet-ops export part',
+            },
         ];
     }
 
     get bulkActions() {
-        return [{ label: 'Delete selected...', class: 'text-red-500', fn: this.partActions.bulkDelete }];
+        return [{ label: 'Delete selected...', class: 'text-red-500', fn: this.partActions.bulkDelete, permission: 'fleet-ops delete part' }];
     }
 
     get columns() {

package/addon/controllers/maintenance/schedules/index.js

@@ -151,14 +151,27 @@ export default class MaintenanceSchedulesIndexController extends Controller {
                 helpText: this.intl.t('common.change-layout'),
             },
             { icon: 'refresh', onClick: this.maintenanceScheduleActions.refresh, helpText: this.intl.t('common.refresh') },
-            { text: this.intl.t('common.new'), type: 'primary', icon: 'plus', onClick: this.maintenanceScheduleActions.transition.create },
-            { text: this.intl.t('common.import'), type: 'magic', icon: 'upload', onClick: this.maintenanceScheduleActions.import },
-            { text: this.intl.t('common.export'), icon: 'long-arrow-up', iconClass: 'rotate-icon-45', wrapperClass: 'hidden md:flex', onClick: this.maintenanceScheduleActions.export },
+            {
+                text: this.intl.t('common.new'),
+                type: 'primary',
+                icon: 'plus',
+                onClick: this.maintenanceScheduleActions.transition.create,
+                permission: 'fleet-ops create maintenance-schedule',
+            },
+            { text: this.intl.t('common.import'), type: 'magic', icon: 'upload', onClick: this.maintenanceScheduleActions.import, permission: 'fleet-ops import maintenance-schedule' },
+            {
+                text: this.intl.t('common.export'),
+                icon: 'long-arrow-up',
+                iconClass: 'rotate-icon-45',
+                wrapperClass: 'hidden md:flex',
+                onClick: this.maintenanceScheduleActions.export,
+                permission: 'fleet-ops export maintenance-schedule',
+            },
         ];
     }
 
     get bulkActions() {
-        return [{ label: 'Delete selected...', class: 'text-red-500', fn: this.maintenanceScheduleActions.bulkDelete }];
+        return [{ label: 'Delete selected...', class: 'text-red-500', fn: this.maintenanceScheduleActions.bulkDelete, permission: 'fleet-ops delete maintenance-schedule' }];
     }
 
     get columns() {

package/addon/controllers/maintenance/work-orders/index.js

@@ -21,14 +21,21 @@ export default class MaintenanceWorkOrdersIndexController extends Controller {
     get actionButtons() {
         return [
             { icon: 'refresh', onClick: this.workOrderActions.refresh, helpText: this.intl.t('common.refresh') },
-            { text: this.intl.t('common.new'), type: 'primary', icon: 'plus', onClick: this.workOrderActions.transition.create },
-            { text: this.intl.t('common.import'), type: 'magic', icon: 'upload', onClick: this.workOrderActions.import },
-            { text: this.intl.t('common.export'), icon: 'long-arrow-up', iconClass: 'rotate-icon-45', wrapperClass: 'hidden md:flex', onClick: this.workOrderActions.export },
+            { text: this.intl.t('common.new'), type: 'primary', icon: 'plus', onClick: this.workOrderActions.transition.create, permission: 'fleet-ops create work-order' },
+            { text: this.intl.t('common.import'), type: 'magic', icon: 'upload', onClick: this.workOrderActions.import, permission: 'fleet-ops import work-order' },
+            {
+                text: this.intl.t('common.export'),
+                icon: 'long-arrow-up',
+                iconClass: 'rotate-icon-45',
+                wrapperClass: 'hidden md:flex',
+                onClick: this.workOrderActions.export,
+                permission: 'fleet-ops export work-order',
+            },
         ];
     }
 
     get bulkActions() {
-        return [{ label: 'Delete selected...', class: 'text-red-500', fn: this.workOrderActions.bulkDelete }];
+        return [{ label: 'Delete selected...', class: 'text-red-500', fn: this.workOrderActions.bulkDelete, permission: 'fleet-ops delete work-order' }];
     }
 
     get columns() {

package/addon/controllers/management/contacts/index.js

@@ -62,12 +62,14 @@ export default class ManagementContactsIndexController extends Controller {
                 type: 'primary',
                 icon: 'plus',
                 onClick: this.contactActions.transition.create,
+                permission: 'fleet-ops create contact',
             },
             {
                 text: this.intl.t('common.import'),
                 type: 'magic',
                 icon: 'upload',
                 onClick: this.contactActions.import,
+                permission: 'fleet-ops import contact',
             },
             {
                 text: this.intl.t('common.export'),
@@ -75,6 +77,7 @@ export default class ManagementContactsIndexController extends Controller {
                 iconClass: 'rotate-icon-45',
                 wrapperClass: 'hidden md:flex',
                 onClick: this.contactActions.export,
+                permission: 'fleet-ops export contact',
             },
         ];
     }
@@ -88,6 +91,7 @@ export default class ManagementContactsIndexController extends Controller {
                 label: this.intl.t('common.delete-selected-count', { count: selected.length }),
                 class: 'text-red-500',
                 fn: this.contactActions.bulkDelete,
+                permission: 'fleet-ops delete contact',
             },
         ];
     }

package/addon/controllers/management/drivers/index.js

@@ -103,12 +103,14 @@ export default class ManagementDriversIndexController extends Controller {
                 type: 'primary',
                 icon: 'plus',
                 onClick: this.driverActions.transition.create,
+                permission: 'fleet-ops create driver',
             },
             {
                 text: this.intl.t('common.import'),
                 type: 'magic',
                 icon: 'upload',
                 onClick: this.driverActions.import,
+                permission: 'fleet-ops import driver',
             },
             {
                 text: this.intl.t('common.export'),
@@ -116,6 +118,7 @@ export default class ManagementDriversIndexController extends Controller {
                 iconClass: 'rotate-icon-45',
                 wrapperClass: 'hidden md:flex',
                 onClick: this.driverActions.export,
+                permission: 'fleet-ops export driver',
             },
         ];
     }
@@ -129,6 +132,7 @@ export default class ManagementDriversIndexController extends Controller {
                 label: this.intl.t('common.delete-selected-count', { count: selected.length }),
                 class: 'text-red-500',
                 fn: this.driverActions.bulkDelete,
+                permission: 'fleet-ops delete driver',
             },
         ];
     }

package/addon/controllers/management/fleets/index.js

@@ -42,12 +42,14 @@ export default class ManagementFleetsIndexController extends Controller {
                 type: 'primary',
                 icon: 'plus',
                 onClick: this.fleetActions.transition.create,
+                permission: 'fleet-ops create fleet',
             },
             {
                 text: this.intl.t('common.import'),
                 type: 'magic',
                 icon: 'upload',
                 onClick: this.fleetActions.import,
+                permission: 'fleet-ops import fleet',
             },
             {
                 text: this.intl.t('common.export'),
@@ -55,6 +57,7 @@ export default class ManagementFleetsIndexController extends Controller {
                 iconClass: 'rotate-icon-45',
                 wrapperClass: 'hidden md:flex',
                 onClick: this.fleetActions.export,
+                permission: 'fleet-ops export fleet',
             },
         ];
     }
@@ -68,6 +71,7 @@ export default class ManagementFleetsIndexController extends Controller {
                 label: this.intl.t('common.delete-selected-count', { count: selected.length }),
                 class: 'text-red-500',
                 fn: this.fleetActions.bulkDelete,
+                permission: 'fleet-ops delete fleet',
             },
         ];
     }

package/addon/controllers/management/fuel-reports/index.js

@@ -56,12 +56,14 @@ export default class ManagementFuelReportsIndexController extends Controller {
                 type: 'primary',
                 icon: 'plus',
                 onClick: this.fuelReportActions.transition.create,
+                permission: 'fleet-ops create fuel-report',
             },
             {
                 text: this.intl.t('common.import'),
                 type: 'magic',
                 icon: 'upload',
                 onClick: this.fuelReportActions.import,
+                permission: 'fleet-ops import fuel-report',
             },
             {
                 text: this.intl.t('common.export'),
@@ -69,6 +71,7 @@ export default class ManagementFuelReportsIndexController extends Controller {
                 iconClass: 'rotate-icon-45',
                 wrapperClass: 'hidden md:flex',
                 onClick: this.fuelReportActions.export,
+                permission: 'fleet-ops export fuel-report',
             },
         ];
     }
@@ -82,6 +85,7 @@ export default class ManagementFuelReportsIndexController extends Controller {
                 label: this.intl.t('common.delete-selected-count', { count: selected.length }),
                 class: 'text-red-500',
                 fn: this.fuelReportActions.bulkDelete,
+                permission: 'fleet-ops delete fuel-report',
             },
         ];
     }

package/addon/controllers/management/fuel-transactions/index.js

@@ -71,6 +71,7 @@ export default class ManagementFuelTransactionsIndexController extends Controlle
                 icon: 'gas-pump',
                 text: 'Fuel Integrations',
                 onClick: () => this.hostRouter.transitionTo('console.fleet-ops.connectivity.fuel-providers.index'),
+                permission: 'fleet-ops list fuel-provider-connection',
             },
         ];
     }
@@ -86,6 +87,7 @@ export default class ManagementFuelTransactionsIndexController extends Controlle
             {
                 label: `Reprocess ${selected.length} selected`,
                 fn: () => this.confirmAction('reprocess', selected),
+                permission: 'fleet-ops update fuel-provider-transaction',
             },
         ];
     }
@@ -196,14 +198,14 @@ export default class ManagementFuelTransactionsIndexController extends Controlle
                 sticky: 'right',
                 width: 60,
                 actions: [
-                    { label: 'Review Details', fn: this.openDetails },
-                    { label: 'Open Fuel Report', fn: this.openFuelReport, isVisible: (transaction) => Boolean(transaction.fuel_report_id) },
+                    { label: 'Review Details', fn: this.openDetails, permission: 'fleet-ops view fuel-provider-transaction' },
+                    { label: 'Open Fuel Report', fn: this.openFuelReport, isVisible: (transaction) => Boolean(transaction.fuel_report_id), permission: 'fleet-ops view fuel-report' },
                     { separator: true },
-                    { label: 'Match to Vehicle', fn: this.matchVehicle },
-                    { label: 'Match to Order', fn: this.matchOrder },
-                    { label: 'Reprocess / Rematch', fn: (transaction) => this.confirmAction('reprocess', transaction) },
-                    { label: 'Ignore Transaction', fn: (transaction) => this.confirmAction('ignored', transaction) },
-                    { label: 'Mark Reviewed', fn: (transaction) => this.confirmAction('reviewed', transaction) },
+                    { label: 'Match to Vehicle', fn: this.matchVehicle, permission: 'fleet-ops update fuel-provider-transaction' },
+                    { label: 'Match to Order', fn: this.matchOrder, permission: 'fleet-ops update fuel-provider-transaction' },
+                    { label: 'Reprocess / Rematch', fn: (transaction) => this.confirmAction('reprocess', transaction), permission: 'fleet-ops update fuel-provider-transaction' },
+                    { label: 'Ignore Transaction', fn: (transaction) => this.confirmAction('ignored', transaction), permission: 'fleet-ops review fuel-provider-transaction' },
+                    { label: 'Mark Reviewed', fn: (transaction) => this.confirmAction('reviewed', transaction), permission: 'fleet-ops review fuel-provider-transaction' },
                 ],
                 sortable: false,
                 filterable: false,

package/addon/controllers/management/issues/index.js

@@ -56,12 +56,14 @@ export default class ManagementIssuesIndexController extends Controller {
                 type: 'primary',
                 icon: 'plus',
                 onClick: this.issueActions.transition.create,
+                permission: 'fleet-ops create issue',
             },
             {
                 text: this.intl.t('common.import'),
                 type: 'magic',
                 icon: 'upload',
                 onClick: this.issueActions.import,
+                permission: 'fleet-ops import issue',
             },
             {
                 text: this.intl.t('common.export'),
@@ -69,6 +71,7 @@ export default class ManagementIssuesIndexController extends Controller {
                 iconClass: 'rotate-icon-45',
                 wrapperClass: 'hidden md:flex',
                 onClick: this.issueActions.export,
+                permission: 'fleet-ops export issue',
             },
         ];
     }
@@ -82,6 +85,7 @@ export default class ManagementIssuesIndexController extends Controller {
                 label: this.intl.t('common.delete-selected-count', { count: selected.length }),
                 class: 'text-red-500',
                 fn: this.issueActions.bulkDelete,
+                permission: 'fleet-ops delete issue',
             },
         ];
     }

package/addon/controllers/management/places/index.js

@@ -34,12 +34,14 @@ export default class ManagementPlacesIndexController extends Controller {
                 type: 'primary',
                 icon: 'plus',
                 onClick: this.placeActions.transition.create,
+                permission: 'fleet-ops create place',
             },
             {
                 text: this.intl.t('common.import'),
                 type: 'magic',
                 icon: 'upload',
                 onClick: this.placeActions.import,
+                permission: 'fleet-ops import place',
             },
             {
                 text: this.intl.t('common.export'),
@@ -47,6 +49,7 @@ export default class ManagementPlacesIndexController extends Controller {
                 iconClass: 'rotate-icon-45',
                 wrapperClass: 'hidden md:flex',
                 onClick: this.placeActions.export,
+                permission: 'fleet-ops export place',
             },
         ];
     }
@@ -60,6 +63,7 @@ export default class ManagementPlacesIndexController extends Controller {
                 label: this.intl.t('common.delete-selected-count', { count: selected.length }),
                 class: 'text-red-500',
                 fn: this.placeActions.bulkDelete,
+                permission: 'fleet-ops delete place',
             },
         ];
     }

package/addon/controllers/management/vehicles/index.js

@@ -102,12 +102,14 @@ export default class ManagementVehiclesIndexController extends Controller {
                 type: 'primary',
                 icon: 'plus',
                 onClick: this.vehicleActions.transition.create,
+                permission: 'fleet-ops create vehicle',
             },
             {
                 text: this.intl.t('common.import'),
                 type: 'magic',
                 icon: 'upload',
                 onClick: this.vehicleActions.import,
+                permission: 'fleet-ops import vehicle',
             },
             {
                 text: this.intl.t('common.export'),
@@ -115,6 +117,7 @@ export default class ManagementVehiclesIndexController extends Controller {
                 iconClass: 'rotate-icon-45',
                 wrapperClass: 'hidden md:flex',
                 onClick: this.vehicleActions.export,
+                permission: 'fleet-ops export vehicle',
             },
         ];
     }
@@ -128,6 +131,7 @@ export default class ManagementVehiclesIndexController extends Controller {
                 label: this.intl.t('common.delete-selected-count', { count: selected.length }),
                 class: 'text-red-500',
                 fn: this.vehicleActions.bulkDelete,
+                permission: 'fleet-ops delete vehicle',
             },
         ];
     }

package/addon/controllers/management/vendors/index.js

@@ -83,12 +83,14 @@ export default class ManagementVendorsIndexController extends Controller {
                 type: 'primary',
                 icon: 'plus',
                 onClick: this.vendorActions.transition.create,
+                permission: 'fleet-ops create vendor',
             },
             {
                 text: this.intl.t('common.import'),
                 type: 'magic',
                 icon: 'upload',
                 onClick: this.vendorActions.import,
+                permission: 'fleet-ops import vendor',
             },
             {
                 text: this.intl.t('common.export'),
@@ -96,6 +98,7 @@ export default class ManagementVendorsIndexController extends Controller {
                 iconClass: 'rotate-icon-45',
                 wrapperClass: 'hidden md:flex',
                 onClick: this.vendorActions.export,
+                permission: 'fleet-ops export vendor',
             },
         ];
     }
@@ -109,6 +112,7 @@ export default class ManagementVendorsIndexController extends Controller {
                 label: this.intl.t('common.delete-selected-count', { count: selected.length }),
                 class: 'text-red-500',
                 fn: this.vendorActions.bulkDelete,
+                permission: 'fleet-ops delete vendor',
             },
         ];
     }

package/addon/controllers/operations/orders/index/details.js

@@ -17,6 +17,7 @@ export default class OperationsOrdersIndexDetailsController extends Controller {
     @service hostRouter;
     @service universe;
     @service sidebar;
+    @service abilities;
     @tracked routingControl;
     @tracked routingCompleted = false;
     @tracked realtimeOrderPublicId = null;
@@ -90,12 +91,14 @@ export default class OperationsOrdersIndexDetailsController extends Controller {
                     {
                         text: 'Edit details',
                         icon: 'pencil',
+                        permission: 'fleet-ops update order',
                         disabled: this.model.status === 'canceled',
                         fn: () => this.orderActions.editOrderDetails(this.model),
                     },
                     {
                         text: 'Update activity',
                         icon: 'signal',
+                        permission: 'fleet-ops update order',
                         disabled: this.model.status === 'canceled',
                         fn: () =>
                             this.orderActions.updateActivity(this.model, {
@@ -105,12 +108,14 @@ export default class OperationsOrdersIndexDetailsController extends Controller {
                     {
                         text: this.model.has_driver_assigned ? 'Unassign driver' : 'Assign driver',
                         icon: this.model.has_driver_assigned ? 'user-xmark' : 'edit',
+                        permission: 'fleet-ops assign-driver-for order',
                         disabled: this.model.has_driver_assigned ? !this.model.hasActiveStatus || !this.model.driver_assigned : !this.model.hasActiveStatus,
                         fn: () => (this.model.has_driver_assigned ? this.orderActions.unassignDriver(this.model) : this.orderActions.assignDriver(this.model)),
                     },
                     {
                         text: 'View order label',
                         icon: 'file-invoice',
+                        permission: 'fleet-ops view order',
                         fn: () => this.orderActions.viewLabel(this.model),
                     },
                     {
@@ -133,6 +138,7 @@ export default class OperationsOrdersIndexDetailsController extends Controller {
                         text: 'Cancel order',
                         icon: 'ban',
                         class: 'text-danger',
+                        permission: 'fleet-ops cancel order',
                         disabled: this.model.status === 'canceled',
                         fn: () => this.orderActions.cancel(this.model),
                     },
@@ -140,6 +146,7 @@ export default class OperationsOrdersIndexDetailsController extends Controller {
                         text: 'Delete order',
                         icon: 'trash',
                         class: 'text-danger',
+                        permission: 'fleet-ops delete order',
                         fn: () =>
                             this.orderActions.delete(this.model, {
                                 taskOptions: {
@@ -151,7 +158,29 @@ export default class OperationsOrdersIndexDetailsController extends Controller {
                     },
                 ].filter(Boolean),
             },
-        ];
+        ].map((actionButton) => ({ ...actionButton, items: this.permittedMenuItems(actionButton.items) }));
+    }
+
+    /**
+     * The panel header dropdown renders `items` as-is and ignores `permission`, so items the
+     * user is not permitted to use are removed here, along with any separators left dangling.
+     */
+    permittedMenuItems(items = []) {
+        const permitted = items.filter((item) => !item.permission || this.abilities.can(item.permission));
+        const result = permitted.reduce((list, item) => {
+            if (item.separator && (list.length === 0 || list[list.length - 1].separator)) {
+                return list;
+            }
+
+            list.push(item);
+            return list;
+        }, []);
+
+        if (result.length && result[result.length - 1].separator) {
+            result.pop();
+        }
+
+        return result;
     }
 
     @action handleActivityModalFinish(options) {