Allow to set API Keys permissions

[darekdesu]

Scope & Context

Created API key has too much permissions (all of them :)) and can negatively affect security in case of its leakage. It also limits ability to share API token with any kind of 3rd party data providers.

Current behavior

Cannot set the scope for created API key

Expected behavior

Ability to set the scope for created API keys like on e.g. on the Github itself where one could set read,write,delete permissions for various API endpoints.

For Twenty the example MVP could be to add selectable scopes like read,create,update,delete for People/Companies/Opportunities and disable of permissions for other actions.

Screenshot for reference:

Technical inputs

N/A