rosa-build/app/policies/token_policy.rb

class TokenPolicy < ApplicationPolicy

  def show?
    # local_admin?(record.subject)
    is_admin? || owner?(record.subject) || local_admin?(record.subject)
  end
  alias_method :create?,   :show?
  alias_method :read?,     :show?
  alias_method :withdraw?, :show?

  # Public: Get list of parameters that the user is allowed to alter.
  #
  # Returns Array
  def permitted_attributes
    %i(description)
  end

end