fix(annotations): Fix annotations control shows if no permission

src/lib/viewers/BaseViewer.js

@@ -1051,7 +1051,11 @@ class BaseViewer extends EventEmitter {
      */
     areNewAnnotationsEnabled() {
         const { showAnnotationsControls, file } = this.options;
-        const { extension } = file || {};
+        const { permissions, extension } = file || {};
+
+        if (!this.hasAnnotationPermissions(permissions)) {
+            return false;
+        }
 
         // Disable new annotations for Excel and iWork formats
         if (EXCEL_EXTENSIONS.includes(extension) || IWORK_EXTENSIONS.includes(extension)) {

src/lib/viewers/__tests__/BaseViewer-test.js

@@ -1263,6 +1263,20 @@ describe('lib/viewers/BaseViewer', () => {
     });
 
     describe('areNewAnnotationsEnabled()', () => {
+        beforeEach(() => {
+            stubs.hasPermissions = sandbox.stub(base, 'hasAnnotationPermissions').returns(true);
+            base.options.file = {
+                permissions: {
+                    can_annotate: true,
+                },
+            };
+        });
+
+        it('should return false if the user cannot create/view annotations', () => {
+            stubs.hasPermissions.returns(false);
+            expect(base.areNewAnnotationsEnabled()).to.be.false;
+        });
+
         EXCEL_EXTENSIONS.concat(IWORK_EXTENSIONS).forEach(extension => {
             it(`should return false if the file is ${extension} format`, () => {
                 base.options.file.extension = extension;