David Heinemeier Hansson
11 lines
237 B
Ruby
11 lines
237 B
Ruby
class Identity::AccessToken < ApplicationRecord
|
|
belongs_to :identity
|
|
|
|
has_secure_token
|
|
enum :permission, %w[ read write ].index_by(&:itself), default: :read
|
|
|
|
def allows?(method)
|
|
method.in?(%w[ GET HEAD ]) || write?
|
|
end
|
|
end
|