- if token&.user&.terms_agreed?
- can [:create, :update, :upload, :close, :subscribe, :unsubscribe], Changeset if capability?(token, :allow_write_api)
- can :create, ChangesetComment if capability?(token, :allow_write_api)
- can [:create, :update, :delete], Node if capability?(token, :allow_write_api)
- can [:create, :update, :delete], Way if capability?(token, :allow_write_api)
- can [:create, :update, :delete], Relation if capability?(token, :allow_write_api)
- end
+ if user&.active?
+ can [:create, :comment, :close, :reopen], Note if scope?(token, :write_notes)
+ can [:show, :data], Trace if scope?(token, :read_gpx)
+ can [:create, :update, :destroy], Trace if scope?(token, :write_gpx)
+ can [:details], User if scope?(token, :read_prefs)
+ can [:gpx_files], User if scope?(token, :read_gpx)
+ can [:index, :show], UserPreference if scope?(token, :read_prefs)
+ can [:update, :update_all, :destroy], UserPreference if scope?(token, :write_prefs)
+
+ if user.terms_agreed?
+ can [:create, :update, :upload, :close, :subscribe, :unsubscribe], Changeset if scope?(token, :write_api)
+ can :create, ChangesetComment if scope?(token, :write_api)
+ can [:create, :update, :delete], [Node, Way, Relation] if scope?(token, :write_api)
+ end