fix: [UIE-9071, UIE-9072] - IAM RBAC: clone linode permission fix, edit linode label permission fix (linode#12668)

* feat: [UIE-9071, UIE-9072] - IAM RBAC: clone linode permission fix, edit linode label permission fix

* Added changeset: IAM RBAC: Missing 'update_linode' check for label edits, missing 'create_linode' account check when enabling Clone button

Author: mpolotsk-akamai

packages/manager/.changeset/pr-12668-fixed-1754917016678.md

@@ -0,0 +1,5 @@
+---
+"@linode/manager": Fixed
+---
+
+IAM RBAC: Missing 'update_linode' check for label edits, missing 'create_linode' account check when enabling Clone button ([#12668](https://github.com/linode/manager/pull/12668))

packages/manager/src/features/Linodes/LinodesDetail/LinodesDetailHeader/LinodeDetailHeader.tsx

@@ -8,6 +8,7 @@ import * as React from 'react';
 import { LandingHeader } from 'src/components/LandingHeader';
 import { ProductInformationBanner } from 'src/components/ProductInformationBanner/ProductInformationBanner';
 import { PENDING_MAINTENANCE_FILTER } from 'src/features/Account/Maintenance/utilities';
+import { usePermissions } from 'src/features/IAM/hooks/usePermissions';
 import { LinodeEntityDetail } from 'src/features/Linodes/LinodeEntityDetail';
 import { MigrateLinode } from 'src/features/Linodes/MigrateLinode/MigrateLinode';
 import { PowerActionsDialog } from 'src/features/Linodes/PowerActionsDialogOrDrawer';
@@ -55,6 +56,11 @@ export const LinodeDetailHeader = () => {
   const { mutateAsync: updateLinode } =
     useLinodeUpdateMutation(matchedLinodeId);
 
+  const { data: permissions } = usePermissions(
+    'linode',
+    ['update_linode'],
+    linodeId
+  );
   const [powerAction, setPowerAction] = React.useState<Action>('Reboot');
   const [powerDialogOpen, setPowerDialogOpen] = React.useState(false);
   const [deleteDialogOpen, setDeleteDialogOpen] = React.useState(search.delete);
@@ -193,6 +199,7 @@ export const LinodeDetailHeader = () => {
           },
           pathname: `/linodes/${linode.label}`,
         }}
+        disabledBreadcrumbEditButton={!permissions.update_linode}
         docsLabel="Docs"
         docsLink="https://techdocs.akamai.com/cloud-computing/docs/getting-started"
         onDocsClick={() => {

packages/manager/src/features/Linodes/LinodesLanding/LinodeActionMenu/LinodeActionMenu.tsx

@@ -57,6 +57,10 @@ export const LinodeActionMenu = (props: LinodeActionMenuProps) => {
   const isBareMetalInstance = linodeType?.class === 'metal';
   const hasHostMaintenance = linodeStatus === 'stopped';
 
+  const { data: accountPermissions } = usePermissions('account', [
+    'create_linode',
+  ]);
+
   const { data: permissions } = usePermissions(
     'linode',
     [
@@ -144,6 +148,7 @@ export const LinodeActionMenu = (props: LinodeActionMenuProps) => {
       condition: !isBareMetalInstance,
       disabled:
         !permissions.clone_linode ||
+        !accountPermissions.create_linode ||
         hasHostMaintenance ||
         linodeIsInDistributedRegion,
       isReadOnly: !permissions.clone_linode,