Custom HTML block and user permissions doctype

ERPNext Customize ERPNext
1

if i created something like this

<div class="workspace-block-container">
  <div class="workspace-section section-sales">Sales </div>
  <div class="workspace-section-container">
    <div class="workspace-block" data-doctype="Sales Order">
      <a href="/app/sales-order">

how can i hide Sales Order or any other doctype based on user permission session, if he is not have permission on sales order , it should hide , how can i handle this in html block