invoiceninja/app/Policies/TokenPolicy.php

<?php

namespace App\Policies;

use App\Models\User;

/**
 * Class TokenPolicy
 */
class TokenPolicy extends EntityPolicy {
    /**
     * @param User $user
     * @param $item
     *
     * @return bool
     */
    public static function edit(User $user, $item) {
        return $user->hasPermission('admin');
    }

    /**
     * @param User $user
     *
     * @return bool
     */
    public static function create(User $user) {
        return $user->hasPermission('admin');
    }
}