Add "read" oauth2 scope.

r2/r2/controllers/api.py

@@ -116,6 +116,8 @@ class ApiController(RedditController, OAuth2ResourceController):
     def ajax_login_redirect(self, form, jquery, dest):
         form.redirect("/login" + query_string(dict(dest=dest)))
 
+    
+    @require_oauth2_scope("read")
     @validate(link1 = VUrl(['url']),
               link2 = VByName('id'),
               count = VLimit('limit'))

r2/r2/controllers/front.py

@@ -201,6 +201,7 @@ class FrontController(RedditController, OAuth2ResourceController):
         # point. Now just redirect to GET mode.
         return self.redirect(request.fullpath + query_string(dict(sort=sort)))
 
+    @require_oauth2_scope("read")
     @validate(article      = VLink('article'),
               comment      = VCommentID('comment'),
               context      = VInt('context', min = 0, max = 8),
@@ -671,6 +672,7 @@ class FrontController(RedditController, OAuth2ResourceController):
             return self._edit_normal_reddit(location, num, after, reverse,
                                             count, created, name, user)
 
+    @require_oauth2_scope("read")
     @api_doc(api_section.subreddits, uri='/r/{subreddit}/about', extensions=['json'])
     def GET_about(self):
         """Return information about the subreddit.

r2/r2/models/token.py

@@ -119,6 +119,11 @@ class OAuth2Scope:
                 "Access the list of subreddits I moderate, contribute to,"
                 " and subscribe to."),
         },
+        "read": {
+            "id": "read",
+            "name": _("Read Content"),
+            "description": _("Access posts and comments through my account."),
+        },
         "submit": {
             "id": "submit",
             "name": _("Submit Content"),