feat: require explicit dashboard read permission

webui/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@govoplan/dashboard-webui",
-  "version": "0.1.19",
+  "version": "0.1.20",
   "private": true,
   "type": "module",
   "main": "src/index.ts",

webui/src/module.ts

@@ -5,6 +5,7 @@ import { generatedTranslations } from "./i18n/generatedTranslations";
 import "./styles/dashboard.css";
 
 const DashboardPage = lazy(() => import("./features/dashboard/DashboardPage"));
+const dashboardRead = ["dashboard:dashboard:read"];
 
 const dashboardWidgets: DashboardWidgetsUiCapability = {
   widgets: [
@@ -117,10 +118,11 @@ export const dashboardModule: PlatformWebModule = {
       order: 10
     }
   ],
-  navItems: [{ to: "/dashboard", label: "i18n:govoplan-dashboard.dashboard.3f8b4df2", iconName: "dashboard", order: 10 }],
+  navItems: [{ to: "/dashboard", label: "i18n:govoplan-dashboard.dashboard.3f8b4df2", iconName: "dashboard", anyOf: dashboardRead, order: 10 }],
   routes: [
     {
       path: "/dashboard",
+      anyOf: dashboardRead,
       order: 10,
       surfaceId: "dashboard.page",
       render: ({ settings, auth }) => createElement(DashboardPage, { settings, auth })