chore: add scope delete capability

ui/admin/app/templates/scopes/scope/edit.hbs

@@ -36,25 +36,27 @@
     </Rose::Nav::Tabs>
   </page.navigation>
 
-  <page.actions>
-    <Rose::Dropdown
-      @text='{{t 'actions.manage'}}'
-      @dropdownRight={{true}}
-      as |dropdown|
-    >
-      <dropdown.button
-        @style='danger'
-        @disabled={{@model.canSave}}
-        {{on 'click' (route-action 'delete' @model)}}
+  {{#if (can 'delete model' @model)}}
+    <page.actions>
+      <Rose::Dropdown
+        @text='{{t 'actions.manage'}}'
+        @dropdownRight={{true}}
+        as |dropdown|
       >
-        {{#if @model.isOrg}}
-          {{t 'resources.org.actions.delete'}}
-        {{else}}
-          {{t 'resources.project.actions.delete'}}
-        {{/if}}
-      </dropdown.button>
-    </Rose::Dropdown>
-  </page.actions>
+        <dropdown.button
+          @style='danger'
+          @disabled={{@model.canSave}}
+          {{on 'click' (route-action 'delete' @model)}}
+        >
+          {{#if @model.isOrg}}
+            {{t 'resources.org.actions.delete'}}
+          {{else}}
+            {{t 'resources.project.actions.delete'}}
+          {{/if}}
+        </dropdown.button>
+      </Rose::Dropdown>
+    </page.actions>
+  {{/if}}
 
   <page.body>
     <Form::Scope

ui/admin/tests/acceptance/scopes/delete-test.js

@@ -83,6 +83,15 @@ module('Acceptance | scopes | delete', function (hooks) {
     assert.equal(getScopeCount('org'), orgScopeCount - 1);
   });
 
+  test('cannot delete scope without proper authorization', async function (assert) {
+    assert.expect(1);
+    instances.scopes.org.update({ authorized_actions: [] });
+    await visit(urls.orgScopeEdit);
+    assert.notOk(
+      find('.rose-layout-page-actions .rose-dropdown-button-danger')
+    );
+  });
+
   test('can accept delete scope via dialog', async function (assert) {
     assert.expect(2);
     const confirmService = this.owner.lookup('service:confirm');