feature: gate audit log by permissions (#3464)

* pairing

* restricting audit route

resolvees #3460

* updated tests

* fixing lint

* useSelector instead of useActor

coderd/rbac/builtin.go

@@ -88,6 +88,7 @@ var (
 					// Should be able to read all template details, even in orgs they
 					// are not in.
 					ResourceTemplate: {ActionRead},
+					ResourceAuditLog: {ActionRead},
 				}),
 			}
 		},

coderd/rbac/object.go

@@ -22,6 +22,12 @@ var (
 		Type: "workspace",
 	}
 
+	// ResourceAuditLog
+	// read = access audit log
+	ResourceAuditLog = Object{
+		Type: "audit_log",
+	}
+
 	// ResourceTemplate CRUD. Org owner only.
 	//	create/delete = Make or delete a new template
 	//	update = Update the template, make new template versions