token->app_view_all

and then do

permission app_view_all = application->view_all

in the token