[FIXED HUDSON-910] Add permission check for newJob and newView pages.

git-svn-id: https://hudson.dev.java.net/svn/hudson/trunk/hudson/main@14113 71c3de6d-444a-0410-be80-ed276b4c234a

core/src/main/resources/hudson/model/Hudson/newView.jelly

@@ -2,7 +2,7 @@
   New View page
 -->
 <j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form">
-  <l:layout norefresh="true">
+  <l:layout norefresh="true" permission="${app.primaryView.CREATE}">
     <st:include page="sidepanel.jelly" />
 
     <l:main-panel>

core/src/main/resources/hudson/model/View/newJob.jelly

@@ -2,7 +2,8 @@
   "New Project" page.
 -->
 <j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:s="/lib/form">
-	<l:layout norefresh="true">
+	<j:getStatic var="permission" className="hudson.model.Item" field="CREATE"/>
+	<l:layout norefresh="true" permission="${permission}">
 		<st:include page="sidepanel.jelly" />
 		<l:main-panel>
 		  <s:form method="post" action="createItem">