From bc9506866f520522d68b9ca50cde002d1484b04c Mon Sep 17 00:00:00 2001
From: fs <fs@breadcrumb-solutions.de>
Date: Wed, 11 Mar 2026 22:18:54 +0100
Subject: [PATCH] Seed api_tokens.manage via init SQL

---
 db/init/init.sql | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/db/init/init.sql b/db/init/init.sql
index f0bfde5..f0442c7 100644
--- a/db/init/init.sql
+++ b/db/init/init.sql
@@ -864,6 +864,7 @@ VALUES
   ('api_audit.view', 'Can view API audit logs', 1, 1),
   ('system_audit.view', 'Can view system audit logs', 1, 1),
   ('system_audit.purge', 'Can purge system audit logs', 1, 1),
+  ('api_tokens.manage', 'Can manage user API tokens', 1, 1),
   ('stats.view', 'Can view statistics', 1, 1)
 ON DUPLICATE KEY UPDATE
   `description` = VALUES(`description`),
@@ -962,6 +963,7 @@ JOIN permissions p ON p.`key` IN (
   'users.lifecycle_restore',
   'custom_fields.manage', 'custom_fields.edit_values',
   'api_docs.view', 'docs.view',
+  'api_tokens.manage',
   'mail_log.view', 'api_audit.view', 'system_audit.view', 'system_audit.purge',
   'stats.view'
 )