Only show inbound stuff if service has permission

Only services that have inbound SMS turned on should be able to see the
dashboard and ‘Received messages’ page.

There’s probably a cleaner way (decorator) of doing this permissions
stuff, but I think it can wait until we ship this.

app/main/views/dashboard.py

@@ -12,6 +12,7 @@ from flask_login import login_required
 
 from app.main import main
 from app import (
+    current_service,
     job_api_client,
     service_api_client,
     template_statistics_client
@@ -139,6 +140,10 @@ def monthly(service_id):
 @login_required
 @user_has_permissions('manage_settings', admin_override=True)
 def inbox(service_id):
+
+    if 'inbound_sms' not in current_service['permissions']:
+        abort(403)
+
     return render_template(
         'views/dashboard/inbox.html',
         messages=service_api_client.get_inbound_sms(service_id),
@@ -178,7 +183,10 @@ def get_dashboard_partials(service_id):
         ),
         'inbox': render_template(
             'views/dashboard/_inbox.html',
-            inbound_sms_summary=service_api_client.get_inbound_sms_summary(service_id),
+            inbound_sms_summary=(
+                service_api_client.get_inbound_sms_summary(service_id)
+                if 'inbound_sms' in current_service['permissions'] else None
+            ),
         ),
         'totals': render_template(
             'views/dashboard/_totals.html',