diff --git a/ee/app/assets/javascripts/repository/components/lock_directory_button.vue b/ee/app/assets/javascripts/repository/components/lock_directory_button.vue
index 8891767520635db071c138a441d06b287bb7ed2f..30d4ccab03b1a2b3245930caa2021097636b17bf 100644
--- a/ee/app/assets/javascripts/repository/components/lock_directory_button.vue
+++ b/ee/app/assets/javascripts/repository/components/lock_directory_button.vue
@@ -1,7 +1,10 @@
 <script>
 import { GlButton, GlTooltipDirective, GlModal, GlModalDirective } from '@gitlab/ui';
-import { sprintf, __ } from '~/locale';
+import { __ } from '~/locale';
+import { createAlert } from '~/alert';
 import glFeatureFlagMixin from '~/vue_shared/mixins/gl_feature_flags_mixin';
+import currentUserQuery from '~/graphql_shared/queries/current_user.query.graphql';
+import projectInfoQuery from 'ee_else_ce/repository/queries/project_info.query.graphql';
 
 export default {
   name: 'LockDirectoryButton',
@@ -37,29 +40,50 @@ export default {
       required: true,
     },
   },
+  apollo: {
+    // eslint-disable-next-line @gitlab/vue-no-undef-apollo-properties
+    projectInfo: {
+      query: projectInfoQuery,
+      variables() {
+        return {
+          projectPath: this.projectPath,
+        };
+      },
+      update({ project }) {
+        this.canAdminLocks = project.userPermissions.adminPathLocks;
+        this.canPushCode = project.userPermissions.pushCode;
+      },
+      error() {
+        this.onFetchError();
+      },
+    },
+    // eslint-disable-next-line @gitlab/vue-no-undef-apollo-properties
+    currentUser: {
+      query: currentUserQuery,
+      update({ currentUser }) {
+        this.user = { ...currentUser };
+      },
+      error() {
+        this.onFetchError();
+      },
+    },
+  },
   data() {
     return {
       canAdminLocks: false,
       canPushCode: false,
       allPathLocks: [],
       pathLock: {},
-      user: {
-        id: 'gid://gitlab/User/1',
-        username: 'root',
-        name: __('Administrator'),
-        avatarUrl: 'https://www.gravatar.com/avatar/e64c7d89f26bd1972efa854d13d7dd61?s=80',
-        webUrl: '/root',
-        webPath: '/root',
-      },
+      user: {},
       isLocked: false,
     };
   },
   computed: {
     showLockButton() {
-      return Boolean(this.glFeatures.fileLocks && this.user.id);
+      return Boolean(this.glFeatures.fileLocks && this.user?.id);
     },
     isLoading() {
-      return false;
+      return this.$apollo?.queries.projectInfo.loading;
     },
     buttonLabel() {
       return this.isLocked ? __('Unlock') : __('Lock');
@@ -68,21 +92,28 @@ export default {
       return this.isLocked ? 'unlock' : 'lock';
     },
     isDisabled() {
-      return false;
+      return !this.canAdminLocks || !this.canPushCode;
     },
     tooltipText() {
+      if (!this.canPushCode) {
+        return __('You do not have permission to lock this');
+      }
+
       return '';
     },
     modalId() {
       return `lock-directory-modal-${this.path.replaceAll('/', '-')}`;
     },
     modalContent() {
-      return sprintf(__('Are you sure you want to %{action} this directory?'), {
-        action: this.buttonLabel.toLowerCase(),
-      });
+      return this.isLocked
+        ? __('Are you sure you want to unlock this directory?')
+        : __('Are you sure you want to lock this directory?');
     },
   },
   methods: {
+    onFetchError() {
+      createAlert({ message: this.$options.i18n.fetchError });
+    },
     toggleLock() {
       this.isLocked = !this.isLocked;
     },
diff --git a/ee/app/assets/javascripts/repository/queries/project_info.query.graphql b/ee/app/assets/javascripts/repository/queries/project_info.query.graphql
new file mode 100644
index 0000000000000000000000000000000000000000..cf52f41597a522850c6714c69617f94a79ae0682
--- /dev/null
+++ b/ee/app/assets/javascripts/repository/queries/project_info.query.graphql
@@ -0,0 +1,15 @@
+#import "ee_else_ce/repository/queries/path_locks.fragment.graphql"
+
+query getProjectInfoEE($projectPath: ID!) {
+  project(fullPath: $projectPath) {
+    id
+    userPermissions {
+      pushCode
+      downloadCode
+      createMergeRequestIn
+      forkProject
+      adminPathLocks
+    }
+    ...ProjectPathLocksFragment
+  }
+}
diff --git a/ee/spec/frontend/repository/components/lock_directory_button_spec.js b/ee/spec/frontend/repository/components/lock_directory_button_spec.js
index 21d9b008ded214e284f39410a3aad77430e2d311..8eee7a5b553a401104ba40693281307015de02bf 100644
--- a/ee/spec/frontend/repository/components/lock_directory_button_spec.js
+++ b/ee/spec/frontend/repository/components/lock_directory_button_spec.js
@@ -1,13 +1,42 @@
 import { shallowMount } from '@vue/test-utils';
 import { GlButton, GlSprintf, GlModal } from '@gitlab/ui';
+import Vue from 'vue';
+import VueApollo from 'vue-apollo';
+import createMockApollo from 'helpers/mock_apollo_helper';
 import waitForPromises from 'helpers/wait_for_promises';
+import { createAlert } from '~/alert';
+import projectInfoQuery from 'ee_component/repository/queries/project_info.query.graphql';
+import currentUserQuery from '~/graphql_shared/queries/current_user.query.graphql';
 import LockDirectoryButton from 'ee_component/repository/components/lock_directory_button.vue';
+import { projectMock, userPermissionsMock, userMock } from 'ee_jest/repository/mock_data';
+
+Vue.use(VueApollo);
+jest.mock('~/alert');
 
 describe('LockDirectoryButton', () => {
   let wrapper;
+  let fakeApollo;
+
+  const currentUserMockResolver = jest.fn().mockResolvedValue(userMock);
+  const signedOutUserResolver = jest.fn().mockResolvedValue({ data: { currentUser: null } });
+  const currentUserErrorResolver = jest.fn().mockRejectedValue(new Error('Request failed'));
+
+  const projectInfoQueryMockResolver = jest.fn().mockResolvedValue(projectMock);
+  const projectInfoQueryErrorResolver = jest.fn().mockRejectedValue(new Error('Request failed'));
+
+  const createComponent = ({
+    fileLocks = true,
+    props = {},
+    projectInfoResolver = projectInfoQueryMockResolver,
+    currentUserResolver = currentUserMockResolver,
+  } = {}) => {
+    fakeApollo = createMockApollo([
+      [projectInfoQuery, projectInfoResolver],
+      [currentUserQuery, currentUserResolver],
+    ]);
 
-  const createComponent = ({ fileLocks = true, props = {} } = {}) => {
     wrapper = shallowMount(LockDirectoryButton, {
+      apolloProvider: fakeApollo,
       provide: {
         glFeatures: {
           fileLocks,
@@ -29,30 +58,68 @@ describe('LockDirectoryButton', () => {
   const findLockDirectoryButton = () => wrapper.findComponent(GlButton);
   const findModal = () => wrapper.findComponent(GlModal);
 
-  beforeEach(() => {
+  beforeEach(async () => {
     createComponent();
+    await waitForPromises();
   });
 
-  describe('component rendering', () => {
+  afterEach(() => {
+    fakeApollo = null;
+  });
+
+  describe('lock button', () => {
     it('does not render when fileLocks feature is not available', async () => {
       createComponent({ fileLocks: false });
       await waitForPromises();
+
+      expect(currentUserMockResolver).toHaveBeenCalled();
       expect(findLockDirectoryButton().exists()).toBe(false);
     });
 
     it('does not render when user is not logged in', async () => {
-      // temporarily setting the user this way,
-      // will change to mocked query in https://gitlab.com/gitlab-org/gitlab/-/merge_requests/173576
-      wrapper.vm.user = { id: null };
+      createComponent({
+        currentUserResolver: signedOutUserResolver,
+      });
       await waitForPromises();
 
       expect(findLockDirectoryButton().exists()).toBe(false);
     });
 
-    it('renders lock button when feature is available and user logged in', async () => {
-      await waitForPromises();
+    it('renders when feature is available and user logged in', () => {
       expect(findLockDirectoryButton().exists()).toBe(true);
     });
+
+    it('renders with loading state until query fetches projects info', async () => {
+      createComponent({
+        projectInfoResolver: projectInfoQueryMockResolver.mockReturnValue(new Promise(() => {})),
+      });
+      await waitForPromises();
+      expect(projectInfoQueryMockResolver).toHaveBeenCalled();
+      expect(findLockDirectoryButton().props('loading')).toBe(true);
+    });
+
+    it('renders disabled with correct tooltip if user does not have permissions to push code', async () => {
+      const projectWithNoPushPermission = {
+        ...projectMock,
+        data: {
+          project: {
+            ...projectMock.data.project,
+            userPermissions: {
+              ...userPermissionsMock,
+              pushCode: false,
+            },
+          },
+        },
+      };
+      createComponent({
+        projectInfoResolver: jest.fn().mockResolvedValue(projectWithNoPushPermission),
+      });
+      await waitForPromises();
+
+      expect(findLockDirectoryButton().text()).toBe('Lock');
+      expect(findLockDirectoryButton().props('disabled')).toBe(true);
+      expect(wrapper.attributes('title')).toBe('You do not have permission to lock this');
+    });
   });
 
   describe('modal', () => {
@@ -62,6 +129,12 @@ describe('LockDirectoryButton', () => {
       expect(findModal().exists()).toBe(true);
     });
 
+    it('has a unique modal id', async () => {
+      findLockDirectoryButton().trigger('click');
+      await waitForPromises();
+      expect(findModal().props('modalId')).toBe('lock-directory-modal-app-models');
+    });
+
     it.each`
       locked   | expectedContent
       ${true}  | ${'Are you sure you want to unlock this directory?'}
@@ -74,4 +147,26 @@ describe('LockDirectoryButton', () => {
       expect(findModal().text()).toContain(expectedContent);
     });
   });
+
+  describe('alert', () => {
+    it('creates an alert with the correct message, when projectInfo query fails', async () => {
+      createComponent({
+        projectInfoResolver: projectInfoQueryErrorResolver,
+      });
+      await waitForPromises();
+      expect(createAlert).toHaveBeenCalledWith({
+        message: 'An error occurred while fetching lock information, please try again.',
+      });
+    });
+
+    it('creates an alert with the correct message, when currentUser query fails', async () => {
+      createComponent({
+        currentUserResolver: currentUserErrorResolver,
+      });
+      await waitForPromises();
+      expect(createAlert).toHaveBeenCalledWith({
+        message: 'An error occurred while fetching lock information, please try again.',
+      });
+    });
+  });
 });
diff --git a/ee/spec/frontend/repository/mock_data.js b/ee/spec/frontend/repository/mock_data.js
index 93d91c1d6b121d9e8a1f59f137530643b3fd04b1..8740d7dcc125512d511113c3488d8d9eb85cefe3 100644
--- a/ee/spec/frontend/repository/mock_data.js
+++ b/ee/spec/frontend/repository/mock_data.js
@@ -65,3 +65,36 @@ export const headerAppInjected = {
     'https://gitlab.com/example-group/example-project/-/jobs/artifacts/main/download?job=build',
   ],
 };
+
+export const userPermissionsMock = {
+  pushCode: true,
+  forkProject: true,
+  downloadCode: true,
+  createMergeRequestIn: true,
+  adminPathLocks: true,
+  __typename: 'ProjectPermissions',
+};
+
+export const projectMock = {
+  data: {
+    project: {
+      __typename: 'Project',
+      id: 'gid://gitlab/Project/7',
+      userPermissions: userPermissionsMock,
+    },
+  },
+};
+
+export const userMock = {
+  data: {
+    currentUser: {
+      __typename: 'CurrentUser',
+      id: 'gid://gitlab/User/1',
+      username: 'root',
+      name: 'Administrator',
+      avatarUrl: 'https://www.gravatar.com/avatar/e64c7d89f26bd1972efa854d13d7dd61?s=80',
+      webUrl: '/root',
+      webPath: '/root',
+    },
+  },
+};
diff --git a/locale/gitlab.pot b/locale/gitlab.pot
index e55303ac214568c706dfce19f7ed48d723d46497..88ecb3a09eaf7f3aee50e2450007fdeea6e24a8f 100644
--- a/locale/gitlab.pot
+++ b/locale/gitlab.pot
@@ -4928,9 +4928,6 @@ msgstr ""
 msgid "AdminUsers|user cap"
 msgstr ""
 
-msgid "Administrator"
-msgstr ""
-
 msgid "Administrator Account Setup"
 msgstr ""
 
@@ -7452,9 +7449,6 @@ msgstr ""
 msgid "Are you sure you want to %{action} %{name}?"
 msgstr ""
 
-msgid "Are you sure you want to %{action} this directory?"
-msgstr ""
-
 msgid "Are you sure you want to approve %{user}?"
 msgstr ""
 
@@ -64112,6 +64106,9 @@ msgstr ""
 msgid "You do not have permission to leave this %{namespaceType}."
 msgstr ""
 
+msgid "You do not have permission to lock this"
+msgstr ""
+
 msgid "You do not have permission to run a pipeline on this branch."
 msgstr ""