First commit about rebuild token policy

src/api/spec/factories/tokens.rb

@@ -8,5 +8,13 @@
     factory :rss_token, class: 'Token::Rss' do
       type { 'Token::Rss' }
     end
+    factory :rebuild_token, class: 'Token::Rebuild' do
+      type { 'Token::Rebuild' }
+      user
+      package
+      trait :with_package_from_association_or_param do
+        package_from_association_or_params { package }
+      end
+    end
   end
 end

src/api/spec/policies/token/rebuild_policy_spec.rb

@@ -0,0 +1,19 @@
+require 'rails_helper'
+
+RSpec.describe Token::RebuildPolicy, vcr: true do
+  let!(:user) { create(:confirmed_user, login: 'foo') }
+  let!(:project) { create(:project, maintainer: user) }
+  let!(:package) { create(:package, project: project) }
+  let!(:other_user) { build(:confirmed_user, login: 'bar') }
+  let!(:rebuild_token) { create(:rebuild_token, :with_package_from_association_or_param, user: user, package: package) }
+  let!(:other_user_rebuild_token) { create(:rebuild_token, :with_package_from_association_or_param, user: other_user) }
+
+  subject { described_class }
+
+  describe '#create' do
+    permissions :create? do
+      it { expect(subject).to permit(user, rebuild_token) }
+      it { expect(subject).not_to permit(other_user, other_user_rebuild_token) }
+    end
+  end
+end