;:rw&#39;.
    The access the bearer token gives is the sum of its access scopes,
    with each access scope representing the following permissions:

    &#39;*:rw&#39;) any request,

    &#39;*:r&#39;) any GET or HEAD request,

    &lt;module&gt; &#39;:rw&#39;) any requests to paths that start with
                    &#39;/&#39; &lt;module&gt; &#39;/&#39; or &#39;/public/&#39; &lt;module&gt; &#39;/&#39;,

    &lt;module&gt; &#39;:r&#39;) any GET or HEAD requests to paths that start with
                  