snipe-it/app/Policies/LicensePolicy.php

<?php

namespace App\Policies;

use App\Models\License;
use App\Models\User;

class LicensePolicy extends CheckoutablePermissionsPolicy
{
    protected function columnName()
    {
        return 'licenses';
    }

    /**
    * Determine whether the user can view license keys.
    * This gets a little tricky, UX/logic-wise. If a user has the ability
    * to create a license (which requires a product key), shouldn't they
    * have the ability to see the product key as well?
    *
    * Example: I create the license, realize I need to change
    * something (maybe I got the product key wrong), and now I can never
    * see/edit that product key.
    *
    * @see https://github.com/snipe/snipe-it/issues/6956
    * @param  \App\Models\User  $user
    * @param  \App\Models\License  $license
    * @return mixed
    */
    public function viewKeys(User $user, License $license = null)
    {
        if ($user->hasAccess('licenses.keys') || $user->hasAccess('licenses.create') || $user->hasAccess('licenses.edit')) {
            return true;
        }
        return false;
    }

    /**
     * Determine whether the user can access files associated with licenses.
     *
     * @param  \App\Models\User  $user
     * @return mixed
     */
    public function files(User $user)
    {
        return $user->hasAccess($this->columnName().'.files');
    }
}