diff --git a/src/app/article/article-default-view-component.spec.ts b/src/app/article/article-default-view-component.spec.ts
index 3cb7d19..20dc084 100644
--- a/src/app/article/article-default-view-component.spec.ts
+++ b/src/app/article/article-default-view-component.spec.ts
@@ -65,16 +65,36 @@ describe("Components", () => {
             expect(state.transitionTo).toHaveBeenCalled();
         });
 
+        it("hide button to delete article when user doesn't have permission", () => {
+            expect(helper.find(".article-toolbar .delete-article").attr('style')).toEqual("display: none; ");
+        });
+
+        it("hide button to edit article when user doesn't have permission", () => {
+            expect(helper.find(".article-toolbar .edit-article").attr('style')).toEqual("display: none; ");
+        });
+
+        it("show button to edit article when user has permission", () => {
+            (<any>helper.component['article'])['permissions'] = ['allow_edit'];
+            helper.detectChanges();
+            expect(helper.find(".article-toolbar .edit-article").attr('style')).toEqual('');
+        });
+
+        it("show button to delete article when user has permission", () => {
+            (<any>helper.component['article'])['permissions'] = ['allow_delete'];
+            helper.detectChanges();
+            expect(helper.find(".article-toolbar .delete-article").attr('style')).toEqual('');
+        });
+
         /**
          * Execute the delete method on the target component
          */
         function doDeleteArticle() {
             // Create a mock for the notification service confirmation
-            spyOn(helper.component.notificationService, 'confirmation').and.callFake(function (params: Function) {
+            spyOn(helper.component.notificationService, 'confirmation').and.callFake(function(params: Function) {
 
             });
             // Create a mock for the ArticleService removeArticle method
-            spyOn(helper.component.articleService, 'remove').and.callFake(function (param: noosfero.Article) {
+            spyOn(helper.component.articleService, 'remove').and.callFake(function(param: noosfero.Article) {
 
                 return {
                     catch: () => { }
diff --git a/src/app/article/article-default-view.component.ts b/src/app/article/article-default-view.component.ts
index 51bd71a..39541bc 100644
--- a/src/app/article/article-default-view.component.ts
+++ b/src/app/article/article-default-view.component.ts
@@ -6,6 +6,7 @@ import {ArticleToolbarHotspotComponent} from "../hotspot/article-toolbar-hotspot
 import {ArticleContentHotspotComponent} from "../hotspot/article-content-hotspot.component";
 import {ArticleService} from "./../../lib/ng-noosfero-api/http/article.service";
 import { NotificationService } from "./../shared/services/notification.service";
+import {PermissionDirective} from '../shared/components/permission/permission.directive';
 
 /**
  * @ngdoc controller
@@ -16,7 +17,8 @@ import { NotificationService } from "./../shared/services/notification.service";
  */
 @Component({
     selector: 'noosfero-default-article',
-    templateUrl: 'app/article/article.html'
+    templateUrl: 'app/article/article.html',
+    directives: [PermissionDirective]
 })
 @Inject("$state", ArticleService, NotificationService)
 export class ArticleDefaultViewComponent {
diff --git a/src/app/article/article.html b/src/app/article/article.html
index 123a264..876ad3c 100644
--- a/src/app/article/article.html
+++ b/src/app/article/article.html
@@ -4,13 +4,15 @@
   </div>
 
   <div class="sub-header clearfix">
-    <a href="#" class="btn btn-default btn-xs" ui-sref="main.cmsEdit({profile: ctrl.profile.identifier, id: ctrl.article.id})">
-      <i class="fa fa-pencil-square-o fa-fw fa-lg"></i> {{"article.actions.edit" | translate}}
-    </a>
-    <a href="#" class="btn btn-default btn-xs" ng-click="ctrl.delete()">
-      <i class="fa fa-trash-o fa-fw fa-lg" ng-click="ctrl.delete()"></i> {{"article.actions.delete" | translate}}
-    </a>    
-    <noosfero-hotspot-article-toolbar [article]="ctrl.article"></noosfero-hotspot-article-toolbar>
+    <div class="article-toolbar">
+      <a href="#" permission="ctrl.article.permissions" permission-action="allow_edit" class="btn btn-default btn-xs edit-article" ui-sref="main.cmsEdit({profile: ctrl.profile.identifier, id: ctrl.article.id})">
+        <i class="fa fa-pencil-square-o fa-fw fa-lg"></i> {{"article.actions.edit" | translate}}
+      </a>
+      <a href="#" permission="ctrl.article.permissions" permission-action="allow_delete" class="btn btn-default btn-xs delete-article" ng-click="ctrl.delete()">
+        <i class="fa fa-trash-o fa-fw fa-lg" ng-click="ctrl.delete()"></i> {{"article.actions.delete" | translate}}
+      </a>
+      <noosfero-hotspot-article-toolbar [article]="ctrl.article"></noosfero-hotspot-article-toolbar>
+    </div>
     <div class="page-info pull-right small text-muted">
       <span class="time">
         <i class="fa fa-clock-o"></i> <span am-time-ago="ctrl.article.created_at | dateFormat"></span>
diff --git a/src/app/article/content-viewer/navbar-actions.html b/src/app/article/content-viewer/navbar-actions.html
index fac7f40..72f9c01 100644
--- a/src/app/article/content-viewer/navbar-actions.html
+++ b/src/app/article/content-viewer/navbar-actions.html
@@ -1,4 +1,4 @@
-<ul class="nav navbar-nav">
+<ul class="nav navbar-nav" permission="vm.profile.permissions" permission-action="allow_edit">
     <li class="dropdown profile-menu" uib-dropdown>
         <a class="btn dropdown-toggle" data-toggle="dropdown" uib-dropdown-toggle>
             {{"navbar.content_viewer_actions.new_item" | translate}}
@@ -19,4 +19,3 @@
     </li>
    
 </ul>
-
diff --git a/src/app/main/main.component.ts b/src/app/main/main.component.ts
index ccf5e9d..8f82a14 100644
--- a/src/app/main/main.component.ts
+++ b/src/app/main/main.component.ts
@@ -39,7 +39,7 @@ import {SidebarComponent} from "../layout/sidebar/sidebar.component";
 
 import {MainBlockComponent} from "../layout/blocks/main/main-block.component";
 import {HtmlEditorComponent} from "../shared/components/html-editor/html-editor.component";
-
+import {PermissionDirective} from "../shared/components/permission/permission.directive";
 
 /**
  * @ngdoc controller
@@ -100,7 +100,7 @@ export class EnvironmentContent {
         LinkListBlockComponent, CommunitiesBlockComponent, HtmlEditorComponent,
         MainBlockComponent, RecentDocumentsBlockComponent, Navbar, SidebarComponent, ProfileImageBlockComponent,
         MembersBlockComponent, NoosferoTemplate, DateFormat, RawHTMLBlockComponent, StatisticsBlockComponent,
-        LoginBlockComponent, CustomContentComponent
+        LoginBlockComponent, CustomContentComponent, PermissionDirective
     ].concat(plugins.mainComponents).concat(plugins.hotspots),
 
     providers: [AuthService, SessionService, NotificationService, BodyStateClassesService]
diff --git a/src/app/profile/custom-content/custom-content.component.spec.ts b/src/app/profile/custom-content/custom-content.component.spec.ts
index 6f88606..b20e738 100644
--- a/src/app/profile/custom-content/custom-content.component.spec.ts
+++ b/src/app/profile/custom-content/custom-content.component.spec.ts
@@ -73,5 +73,16 @@ describe("Components", () => {
             helper.component.save();
             expect(helper.component['notificationService'].success).toHaveBeenCalled();
         });
+
+        it("hide button to edit content when user doesn't have the permission", () => {
+            helper.detectChanges();
+            expect(helper.find(".actions").attr('style')).toEqual('display: none; ');
+        });
+
+        it("show button to edit content when user has the permission", () => {
+            (<any>helper.component['profile'])['permissions'] = ['allow_edit'];
+            helper.detectChanges();
+            expect(helper.find(".actions").attr('style')).toEqual('');
+        });
     });
 });
diff --git a/src/app/profile/custom-content/custom-content.component.ts b/src/app/profile/custom-content/custom-content.component.ts
index 0d8cf89..4b99061 100644
--- a/src/app/profile/custom-content/custom-content.component.ts
+++ b/src/app/profile/custom-content/custom-content.component.ts
@@ -1,10 +1,12 @@
 import {Component, Input, Inject} from 'ng-forward';
 import {ProfileService} from '../../../lib/ng-noosfero-api/http/profile.service';
 import {NotificationService} from '../../shared/services/notification.service';
+import {PermissionDirective} from '../../shared/components/permission/permission.directive';
 
 @Component({
     selector: 'custom-content',
     templateUrl: "app/profile/custom-content/custom-content.html",
+    directives: [PermissionDirective]
 })
 @Inject("$uibModal", "$scope", ProfileService, NotificationService)
 export class CustomContentComponent {
diff --git a/src/app/profile/custom-content/custom-content.html b/src/app/profile/custom-content/custom-content.html
index 50d046e..869e874 100644
--- a/src/app/profile/custom-content/custom-content.html
+++ b/src/app/profile/custom-content/custom-content.html
@@ -1,5 +1,5 @@
 <div class="custom-content">
-  <div class="actions">
+  <div class="actions" permission="ctrl.profile.permissions" permission-action="allow_edit">
     <button type="submit" class="btn btn-xs btn-default" ng-click="ctrl.openEdit()"><i class="fa fa-edit fa-fw"></i> {{ctrl.label | translate}}</button>
   </div>
   <div class="content" ng-bind-html="ctrl.content"></div>
diff --git a/src/app/shared/components/permission/permission.directive.spec.ts b/src/app/shared/components/permission/permission.directive.spec.ts
new file mode 100644
index 0000000..fac2ab5
--- /dev/null
+++ b/src/app/shared/components/permission/permission.directive.spec.ts
@@ -0,0 +1,27 @@
+import {Input, provide, Component} from 'ng-forward';
+import {PermissionDirective} from "./permission.directive";
+import * as helpers from "../../../../spec/helpers";
+
+const htmlTemplate: string = '<div permission="ctrl.permissions" permission-action="action"></div>';
+
+describe("Permission directive", () => {
+
+    let element = jasmine.createSpyObj("$element", ["css"]);
+    let scope = jasmine.createSpyObj("$scope", ["$watch", "$eval"]);
+    scope.$watch = (param: string, f: Function) => { f(); };
+    scope.$eval = (param: any) => { return param; };
+
+    it("hide element when there is no permission action in the permissions array", (done: Function) => {
+        let attrs: any = { permission: [], permissionAction: 'action' };
+        let directive = new PermissionDirective(<any>attrs, scope, element);
+        expect(element.css).toHaveBeenCalledWith('display', 'none');
+        done();
+    });
+
+    it("show element when the permission action exists in the permissions array", (done: Function) => {
+        let attrs = { permission: ['action'], permissionAction: 'action' };
+        let directive = new PermissionDirective(<any>attrs, scope, element);
+        expect(element.css).toHaveBeenCalledWith('display', '');
+        done();
+    });
+});
diff --git a/src/app/shared/components/permission/permission.directive.ts b/src/app/shared/components/permission/permission.directive.ts
new file mode 100644
index 0000000..2917212
--- /dev/null
+++ b/src/app/shared/components/permission/permission.directive.ts
@@ -0,0 +1,20 @@
+import {Directive, Inject, Input} from "ng-forward";
+
+@Directive({
+    selector: '[permission]'
+})
+@Inject('$attrs', '$scope', '$element')
+export class PermissionDirective {
+
+    constructor($attrs: ng.IAttributes, $scope: ng.IScope, $element: any) {
+        $scope.$watch($attrs['permission'], () => {
+            let permissions = $scope.$eval($attrs['permission']);
+            let permissionAction = $attrs['permissionAction'];
+            if (!permissions || permissions.indexOf(permissionAction) < 0) {
+                $element.css("display", "none");
+            } else {
+                $element.css("display", "");
+            }
+        });
+    }
+}
--
libgit2 0.21.2