Merge pull request '[GITEA] do not display secrets when actions is disabled on a repo' (go-gitea#941) from earl-warren/forgejo:wip-v1.19-secrets-navbar into v1.19/forgejo

Reviewed-on: https://codeberg.org/forgejo/forgejo/pulls/941

Author: Loïc Dachary

templates/repo/settings/navbar.tmpl

@@ -27,7 +27,7 @@
 		<a class="{{if .PageIsSettingsKeys}}active {{end}}item" href="{{.RepoLink}}/settings/keys">
 			{{.locale.Tr "repo.settings.deploy_keys"}}
 		</a>
-		{{if .EnableActions}}
+		{{if and .EnableActions (not .UnitActionsGlobalDisabled) (.Permission.CanRead $.UnitTypeActions)}}
 		<a class="{{if .PageIsSettingsSecrets}}active {{end}}item" href="{{.RepoLink}}/settings/secrets">
 			{{.locale.Tr "secrets.secrets"}}
 		</a>