add User#internal? and some global permissions

app/models/user.rb

@@ -350,12 +350,15 @@ class User < ActiveRecord::Base
     def ghost
       unique_internal(where(ghost: true), 'ghost', 'ghost%s@example.com') do |u|
         u.bio = 'This is a "Ghost User", created to hold all issues authored by users that have since been deleted. This user cannot be removed.'
-        u.state = :blocked
         u.name = 'Ghost User'
       end
     end
   end
 
+  def internal?
+    ghost?
+  end
+
   #
   # Instance methods
   #

app/policies/global_policy.rb

@@ -4,5 +4,11 @@ class GlobalPolicy < BasePolicy
 
     can! :create_group if @user.can_create_group
     can! :read_users_list
+
+    unless @user.blocked? || @user.internal?
+      can! :log_in
+      can! :access_api
+      can! :access_git
+    end
   end
 end