Merge pull request guardian#4317 from bbc/conal/IMAGEDAM-1830-restrictPhotoSalesFunctionality

IMAEGEDAM-1830: showPaid permission prevents standard users from accessing sendToPhotosales functionality

Author: andrew-nowak

kahuna/public/js/search/results.html

@@ -83,7 +83,7 @@
 
                 <div class="results-toolbar-item results-toolbar-item--right"
                     tabindex="0"
-                    ng-if="ctrl.showSendToPhotoSales()">
+                    ng-if="ctrl.showSendToPhotoSales() && ctrl.showPaid">
                     <a id="send-to"
                        style="display: contents;"
                        ng-class="{'batch-archive__button--disabled': ctrl.selectionCount >= 45}"

kahuna/public/js/search/results.js

@@ -419,6 +419,11 @@ results.controller('SearchResultsCtrl', [
         return [validImages, invalidImages];
       };
 
+      ctrl.showPaid = undefined;
+      mediaApi.getSession().then(session => {
+        ctrl.showPaid = session.user.permissions.showPaid ? session.user.permissions.showPaid : undefined;
+      });
+
       ctrl.sendToPhotoSales = () => {
         try {
           const validImages = validatePhotoSalesSelection(ctrl.selectedImages)[0];