Expose manual action abilities from a build entity

app/serializers/build_entity.rb

@@ -12,7 +12,7 @@ class BuildEntity < Grape::Entity
     path_to(:retry_namespace_project_build, build)
   end
-  expose :play_path, if: ->(build, _) { build.playable? } do |build|
+  expose :play_path, if: proc { playable? } do |build|
     path_to(:play_namespace_project_build, build)
   end
@@ -25,11 +25,15 @@ class BuildEntity < Grape::Entity
   alias_method :build, :object
-  def path_to(route, build)
-    send("#{route}_path", build.project.namespace, build.project, build)
+  def playable?
+    build.playable? && build.can_play?(request.user)
   end
   def detailed_status
     build.detailed_status(request.user)
   end
+
+  def path_to(route, build)
+    send("#{route}_path", build.project.namespace, build.project, build)
+  end
 end

spec/serializers/build_entity_spec.rb

@@ -41,13 +41,37 @@ describe BuildEntity do
     it 'does not contain path to play action' do
       expect(subject).not_to include(:play_path)
     end
+
+    it 'is not a playable job' do
+      expect(subject[:playable]).to be false
+    end
   end
   context 'when build is a manual action' do
     let(:build) { create(:ci_build, :manual) }
+    context 'when user is allowed to trigger action' do
+      before do
+        build.project.add_master(user)
+      end
+
       it 'contains path to play action' do
         expect(subject).to include(:play_path)
       end
+
+      it 'is a playable action' do
+        expect(subject[:playable]).to be true
+      end
+    end
+
+    context 'when user is not allowed to trigger action' do
+      it 'does not contain path to play action' do
+        expect(subject).not_to include(:play_path)
+      end
+
+      it 'is not a playable action' do
+        expect(subject[:playable]).to be false
+      end
+    end
   end
 end