invoiceninja/app/Policies/TokenPolicy.php

<?php

namespace App\Policies;

use App\Models\User;

class TokenPolicy extends EntityPolicy {
    public static function edit(User $user, $item) {
        return $user->hasPermission('admin');
    }

    public static function create(User $user) {
        return $user->hasPermission('admin');
    }
}