feat: User should not able to see the merge button in MR page when no permission