Permissions

[andreareginato]

This is an important feature and let other people access your devices

• limit by time
• limit by resources

Basically it release an access token and uses it to access your resources. In this case we need to empower the token. We do not need only the list of resources but also the type of token. If you think at real usage cases you should easily handle:

• remove permission
• list permissions from all users
• list permissions from a user

This is a must to have service if we want to access to hotels. See the invitations doc we made long time ago.