middleware should allow, not deny

app/Http/Controllers/Api/ApplicationsController.php

@@ -29,7 +29,7 @@ class ApplicationsController extends Controller
         $application->makeHidden([
             'id',
         ]);
-        if ($token->can('view:sensitive')) {
+        if ($token->can('read:sensitive')) {
             return serializeApiResponse($application);
         }
         $application->makeHidden([

app/Http/Controllers/Api/DatabasesController.php

@@ -24,7 +24,7 @@ class DatabasesController extends Controller
             'id',
             'laravel_through_key',
         ]);
-        if ($token->can('view:sensitive')) {
+        if ($token->can('read:sensitive')) {
             return serializeApiResponse($database);
         }
 

app/Http/Controllers/Api/DeployController.php

@@ -17,7 +17,7 @@ class DeployController extends Controller
     private function removeSensitiveData($deployment)
     {
         $token = auth()->user()->currentAccessToken();
-        if ($token->can('view:sensitive')) {
+        if ($token->can('read:sensitive')) {
             return serializeApiResponse($deployment);
         }
 

app/Http/Controllers/Api/SecurityController.php

@@ -12,7 +12,7 @@ class SecurityController extends Controller
     private function removeSensitiveData($team)
     {
         $token = auth()->user()->currentAccessToken();
-        if ($token->can('view:sensitive')) {
+        if ($token->can('read:sensitive')) {
             return serializeApiResponse($team);
         }
         $team->makeHidden([

app/Http/Controllers/Api/ServersController.php

@@ -20,7 +20,7 @@ class ServersController extends Controller
     private function removeSensitiveDataFromSettings($settings)
     {
         $token = auth()->user()->currentAccessToken();
-        if ($token->can('view:sensitive')) {
+        if ($token->can('read:sensitive')) {
             return serializeApiResponse($settings);
         }
         $settings = $settings->makeHidden([
@@ -36,7 +36,7 @@ class ServersController extends Controller
         $server->makeHidden([
             'id',
         ]);
-        if ($token->can('view:sensitive')) {
+        if ($token->can('read:sensitive')) {
             return serializeApiResponse($server);
         }
 

app/Http/Controllers/Api/ServicesController.php

@@ -22,7 +22,7 @@ class ServicesController extends Controller
         $service->makeHidden([
             'id',
         ]);
-        if ($token->can('view:sensitive')) {
+        if ($token->can('read:sensitive')) {
             return serializeApiResponse($service);
         }
 

app/Http/Controllers/Api/TeamController.php

@@ -15,7 +15,7 @@ class TeamController extends Controller
             'custom_server_limit',
             'pivot',
         ]);
-        if ($token->can('view:sensitive')) {
+        if ($token->can('read:sensitive')) {
             return serializeApiResponse($team);
         }
         $team->makeHidden([