[Fixes #297] Enforce add_resourcebase permission control on apps list…

… page (#298)

* use add_resource perm

* Update app_list.html

Co-authored-by: Giovanni Allegri <giohappy@gmail.com>

geonode_mapstore_client/templates/geonode-mapstore-client/app_list.html

@@ -6,7 +6,7 @@
 
 {% block body %}
   <div class="page-header">
-    {% if user.is_authenticated and not READ_ONLY_MODE %}
+    {% if user.is_authenticated and "add_resource" in user.perms%}
     <div class="dropdown" style="float: right;">
       <button class="btn btn-primary dropdown-toggle" type="button" id="create-new-app-dropdown-menu" data-toggle="dropdown" aria-haspopup="true" aria-expanded="true">
         {% trans "Create New" %} {% blocktrans %}{{GEONODE_APPS_NAME}}{% endblocktrans %}