fix(SO, DN): only show permitted actions (backport #41384)

[mergify]

Assume we have a user whose only permission is to read Sales Orders. We shouldn't display all the "Update Items" and "Create ..." buttons, because clicking them will just result in an error message and a frustrating user experience.

Before

All actions are available, regardless of permissions.

After

Only permitted actions are displayed (none, in this case).

The same applies to Delivery Note.

---

This is an automatic backport of pull request #41384 done by Mergify.

[mergify]

Cherry-pick of c29d955 has failed:

On branch mergify/bp/version-14-hotfix/pr-41384
Your branch is up to date with 'origin/version-14-hotfix'.

You are currently cherry-picking commit c29d955371.
  (fix conflicts and run "git cherry-pick --continue")
  (use "git cherry-pick --skip" to skip this patch)
  (use "git cherry-pick --abort" to cancel the cherry-pick operation)

Unmerged paths:
  (use "git add <file>..." to mark resolution)
	both modified:   erpnext/selling/doctype/sales_order/sales_order.js

no changes added to commit (use "git add" and/or "git commit -a")

Cherry-pick of 418bdc1 has failed:

On branch mergify/bp/version-14-hotfix/pr-41384
Your branch is ahead of 'origin/version-14-hotfix' by 1 commit.
  (use "git push" to publish your local commits)

You are currently cherry-picking commit 418bdc1dcc.
  (fix conflicts and run "git cherry-pick --continue")
  (use "git cherry-pick --skip" to skip this patch)
  (use "git cherry-pick --abort" to cancel the cherry-pick operation)

Changes to be committed:
	modified:   erpnext/public/js/controllers/transaction.js

Unmerged paths:
  (use "git add <file>..." to mark resolution)
	both modified:   erpnext/stock/doctype/delivery_note/delivery_note.js

To fix up this pull request, you can check it out locally. See documentation: https://docs.github.com/en/pull-requests/collaborating-with-pull-requests/reviewing-changes-in-pull-requests/checking-out-pull-requests-locally