Show generate creds for static-roles when you have read permissions

changelog/19190.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+ui: show Get credentials button for static roles detail page when a user has the proper permissions.
+```

ui/app/models/database/role.js

@@ -130,6 +130,7 @@ export default Model.extend({
   credentialPath: lazyCapabilities(apiPath`${'backend'}/creds/${'id'}`, 'backend', 'id'),
   staticCredentialPath: lazyCapabilities(apiPath`${'backend'}/static-creds/${'id'}`, 'backend', 'id'),
   canGenerateCredentials: alias('credentialPath.canRead'),
+  canGenerateStaticCredentials: alias('staticCredentialPath.canRead'),
   canGetCredentials: alias('staticCredentialPath.canRead'),
   databasePath: lazyCapabilities(apiPath`${'backend'}/config/${'database[0]'}`, 'backend', 'database'),
   canUpdateDb: alias('databasePath.canUpdate'),

ui/app/templates/components/database-role-edit.hbs

@@ -36,12 +36,17 @@
           Rotate credentials
         </button>
       {{/if}}
-      {{#if @model.canGenerateCredentials}}
+      {{#if
+        (or
+          (and (eq @model.type "static") @model.canGenerateStaticCredentials)
+          (and (eq @model.type "dynamic") @model.canGenerateCredentials)
+        )
+      }}
         <button
           type="button"
           class="toolbar-link"
           {{on "click" (fn this.generateCreds @model.id @model.type)}}
-          data-test-database-role-generate-creds
+          data-test-database-role-creds={{@model.type}}
         >
           {{if (eq @model.type "static") "Get credentials" "Generate credentials"}}
         </button>

ui/tests/integration/components/database-role-edit-test.js

@@ -0,0 +1,45 @@
+import { module, test } from 'qunit';
+import { setupRenderingTest } from 'ember-qunit';
+import { render } from '@ember/test-helpers';
+import { hbs } from 'ember-cli-htmlbars';
+import { setupMirage } from 'ember-cli-mirage/test-support';
+import { capabilitiesStub } from 'vault/tests/helpers/stubs';
+
+module('Integration | Component | database-role-edit meep', function (hooks) {
+  setupRenderingTest(hooks);
+  setupMirage(hooks);
+
+  hooks.beforeEach(function () {
+    this.store = this.owner.lookup('service:store');
+    this.store.pushPayload('database-role', {
+      modelName: 'database/role',
+      database: ['my-mongodb-database'],
+      backend: 'database',
+      type: 'static',
+      name: 'my-static-role',
+      id: 'my-static-role',
+    });
+    this.store.pushPayload('database-role', {
+      modelName: 'database/role',
+      database: ['my-mongodb-database'],
+      backend: 'database',
+      type: 'dynamic',
+      name: 'my-dynamic-role',
+      id: 'my-dynamic-role',
+    });
+    this.modelStatic = this.store.peekRecord('database/role', 'my-static-role');
+    this.modelDynamic = this.store.peekRecord('database/role', 'my-dynamic-role');
+  });
+
+  test('it should show Get credentials button when a user has the correct policy', async function (assert) {
+    this.server.post('/sys/capabilities-self', capabilitiesStub('database/static-creds/my-role', ['read']));
+    await render(hbs`<DatabaseRoleEdit @model={{this.modelStatic}} @mode="show"/>`);
+    assert.dom('[data-test-database-role-creds="static"]').exists('Get credentials button exists');
+  });
+
+  test('it should show Generate credentials button when a user has the correct policy', async function (assert) {
+    this.server.post('/sys/capabilities-self', capabilitiesStub('database/creds/my-role', ['read']));
+    await render(hbs`<DatabaseRoleEdit @model={{this.modelDynamic}} @mode="show"/>`);
+    assert.dom('[data-test-database-role-creds="dynamic"]').exists('Generate credentials button exists');
+  });
+});