From 4efb421800227aee83613583c2408197e48726d3 Mon Sep 17 00:00:00 2001
From: Shivam Mishra <scm.mymail@gmail.com>
Date: Fri, 29 May 2026 16:22:13 +0530
Subject: [PATCH] feat: hide integration hook settings when using read only
 token

---
 app/views/api/v1/models/_hook.json.jbuilder | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/app/views/api/v1/models/_hook.json.jbuilder b/app/views/api/v1/models/_hook.json.jbuilder
index 5df214ac8..c7a8d8659 100644
--- a/app/views/api/v1/models/_hook.json.jbuilder
+++ b/app/views/api/v1/models/_hook.json.jbuilder
@@ -5,5 +5,5 @@ json.inbox resource.inbox&.slice(:id, :name)
 json.account_id resource.account_id
 json.hook_type resource.hook_type
 
-json.settings resource.settings if Current.account_user&.administrator?
+json.settings resource.settings if Current.account_user&.administrator? && @access_token&.scope != 'read_only'
 json.reference_id resource.reference_id if Current.account_user&.administrator?