Use permission for resource instead of page

ee/app/serializers/dependency_entity.rb

@@ -23,7 +23,7 @@ class DependencyEntity < Grape::Entity
   private
 
   def can_read_vulnerabilities?
-    can?(request.user, :read_project_security_dashboard, request.project)
+    can?(request.user, :read_vulnerability, request.project)
   end
 
   def can_read_licenses?