Hide or disable security reports feedback actions when not authorized

Description

The Dismiss and Create issue actions are restricted to the developer role (or above) but we currently always show the buttons as enabled.

Proposal

We should either disable the button or adapt the error message to explain the user he is not authorized to do this.

We should only render the buttons when the users have permissions, like we do elsewhere