tools.view for the Tech Tools entry

plugins/tools/plugin.py

@@ -67,6 +67,11 @@ class ToolsPlugin(BasePlugin):
         about revoking what a role does or does not hold.
         """
         return [
+            # Reaching the tools page at all. The tools themselves run in the
+            # browser and touch no data, so this is about whether the entry
+            # appears - which is exactly the question a site answers when it
+            # decides whether people without an account may use them.
+            ('tools.view', 'Use the browser tools (codes, conversions)', 'tools'),
             ('tools.secrets', 'Create secure send links', 'tools'),
         ]
 
@@ -135,6 +140,9 @@ class ToolsPlugin(BasePlugin):
                 'route': '/tools',
                 'position': 47,
                 'section': 'fleet',
+                # Either right reaches the page: somebody granted only Secure
+                # Send still needs the entry that leads to it.
+                'permission': ['tools.view', 'tools.secrets'],
             },
         ]