forgeplus/app/controllers/api/v1/base_controller.rb

class Api::V1::BaseController < ApplicationController

  include Api::ProjectHelper
  include Api::UserHelper

  before_action :doorkeeper_authorize!
  skip_before_action :user_setup

  protected 
  def current_user 
    User.find(doorkeeper_token.resource_owner_id) if doorkeeper_token
  end

  def require_manager_above
    @project = load_project
    return render_forbidden unless current_user.admin? && @project.manager?(current_user)
  end
end