Allow to specify token scopes

src/views/profile.html

@@ -334,6 +334,12 @@
                 <input type="text" class="form-control" id="inputApiTokenName" ng-model="tokens.add.name" name="name" required autofocus>
               </div>
 
+              <div class="checkbox">
+                <label>
+                  <input type="checkbox" ng-model="tokens.add.readWrite">Read and write API access</input>
+                </label>
+              </div>
+
               <input class="ng-hide" type="submit" ng-disabled="apiTokenAddForm.$invalid"/>
             </form>
           </div>

src/views/profile.js

@@ -662,10 +662,12 @@ angular.module('Application').controller('ProfileController', ['$scope', '$trans
             error: null,
             name: '',
             accessToken: '',
+            readWrite: true,
 
             show: function () {
                 $scope.tokens.add.name = '';
                 $scope.tokens.add.accessToken = '';
+                $scope.tokens.add.readWrite = true;
                 $scope.tokens.add.busy = false;
                 $scope.tokens.add.error = null;
                 $scope.apiTokenAddForm.name.$setPristine();
@@ -676,7 +678,9 @@ angular.module('Application').controller('ProfileController', ['$scope', '$trans
             submit: function () {
                 $scope.tokens.add.busy = true;
 
-                Client.createToken($scope.tokens.add.name, function (error, result) {
+                var scope = { '*': $scope.tokens.add.readWrite ? 'rw' : 'r' };
+
+                Client.createToken($scope.tokens.add.name, scope, function (error, result) {
                     if (error) {
                         if (error.statusCode === 400) {
                             $scope.tokens.add.error = error.message;