add authorization rule model

src/authentic2/models.py

@@ -28,6 +28,19 @@ from . import natural_key
 from .utils import ServiceAccessDenied
 
 
+class AuthorizationRule(models.Model):
+    SCOPE_READ = 1
+    SCOPE_WRITE = 2
+    AUTHZ_SCOPES_CHOICES = (
+        (SCOPE_READ, "Read"),
+        (SCOPE_WRITE, "Write"),
+    )
+    scopes = models.CharField(
+        verbose_name=_('scopes'),
+        choices=AUTHZ_SCOPES_CHOICES,
+        max_length=63)
+
+
 class DeletedUser(models.Model):
     '''Record users to delete'''