audit view permission

app/Domain/ACL/Permission.php

@@ -25,4 +25,5 @@ enum Permission: string
     case AssignRadiologist = 'assign_radiologist';
     case UnassignRadiologist = 'unassign_radiologist';
     case AccessAllWorklists = 'access_all_worklists';
+    case AuditLogView = 'audit_log_view';
 }

app/Services/ACL/WorklistGuard.php

@@ -2,6 +2,7 @@
 
 namespace App\Services\ACL;
 
+use App\Domain\ACL\Permission;
 use App\Models\Study;
 use App\Models\User;
 use Illuminate\Support\Collection;
@@ -56,7 +57,7 @@ public static function worklistButtons(Study $study, User|int|null $usr = null):
             return collect([
                 WorklistButton::StudyMetadata,
                 WorklistButton::Notes,
-                WorklistButton::Audit,
+                // WorklistButton::Audit,
             ]);
         }
 
@@ -69,7 +70,10 @@ public static function worklistButtons(Study $study, User|int|null $usr = null):
         if ($study->canAssignRad()) {
             $buttons->push(WorklistButton::Assign);
         }
+
+        if (may(Permission::AuditLogView)) {
             $buttons->push(WorklistButton::Audit);
+        }
 
         return $buttons;
     }

database/seeders/RoleSeeder.php

@@ -48,6 +48,7 @@ public function run(): void
             Permission::AttachmentDownload,
             Permission::StudyArchive,
             Permission::ReportDownload,
+            Permission::AuditLogView,
         ]);
 
         $adm->givePermissionTo(SpatiePermission::all());