A User without the Permissions to Update/Configure Fragment Collections or Delete Them Should not be Given the Option to Import/Delete Them

• Type: Bug
• Status: Closed
• Resolution: Fixed
• Affects Version/s: Master
• Fix Version/s: 7.1.0 Beta 3, 7.1.X, Master
• Component/s: Fragment Administration
• Labels: None
• Fix Priority: 3
• Git Pull Request: https://github.com/brianchandotcom/liferay-portal/pull/59447

Description
The Kebab Menu with Option to Import new Collections and Deleting Collections is available for users without the permissions to configure/update them. The Export option makes sense, since the user should be able to export them since they can view them anyways, but importing fragments is essentially both and Add and an Update action (depending on flag set), and Deleting a Collection is a Delete action. These are not actually permitted, but they should be hidden to prevent user confusion

Steps to Reproduce

1. Create a Fragment Collection and Fragment
2. Give User the Permissions shown in screenshot
3. Login as the User
4. Navigate to Site Admin > Build > Page Fragments
5. Try to Import/Delete Collections

Expected Result
Option not Visible

Actual Result
Option Visible, but not permitted

Reproduced on:
Tomcat 9.0.6 + MySQL 5.7
Portal master GIT ID: edb9113582bde43daefaff1c95c87cabeec94582