Today we announced new Forge Jira permission modules: Forge Jira permission modules EAP
You can use them to display certain functionality for the user depending on the permission (permission check can be done via REST API call). Hope it helps with your use case.
Best regards,
Łukasz