refs #6067 refactor: vnUser and mailForward privileges. fix: emailVerification

@@ -222,0 +204,4 @@
+    Self.observe('after save', async ctx => {
+        const newEmail = ctx?.instance?.email;
+        const oldEmail = ctx?.hookState?.oldInstance?.email;
+        if (!ctx.isNewInstance && (!newEmail || !oldEmail || newEmail == oldEmail)) return;

@@ -0,0 +35,4 @@
+    Self.updateUser = async(ctx, id) => {
+        await Self.userSecurity(ctx, id);
+        const user = await Self.app.models.VnUser.findById(id,
+            {fields: ['id', 'name', 'nickname', 'email', 'lang', 'password']});

@@ -0,0 +36,4 @@
+        await Self.userSecurity(ctx, id);
+        const user = await Self.app.models.VnUser.findById(id,
+            {fields: ['id', 'name', 'nickname', 'email', 'lang', 'password']});
+        await user.updateAttributes(ctx.args);

@@ -216,3 +201,1 @@
-    //         protocol: url[0],
-    //         user: Self
-    //     };
+        throw new UserError(`You don't have enough privileges`);

@@ -222,0 +231,4 @@
+            type: 'email',
+            to: newEmail,
+            from: {},
+            redirect: `${origin}/#!/account/${ctx.instance.id}/basic-data?emailConfirmed`,

@@ -0,0 +4,4 @@
+        ('VnUser', 'mediumPrivileges', '*', 'ALLOW', 'ROLE', 'hr'),
+        ('VnUser', 'updateUser', '*', 'ALLOW', 'ROLE', 'employee');
+
+ALTER TABLE `account`.`user` ADD `username` varchar(30) AS (name) VIRTUAL;

@@ -0,0 +7,4 @@
+    Self.observe('before delete', async ctx => {
+        await Self.app.models.VnUser.userSecurity(ctx, ctx.where.account);
+    });
+};

@@ -155,6 +155,7 @@ module.exports = Self => {
                         password: randomPassword.password,
                         email: args.email,
                         roleFk: workerConfig.roleFk,
+                        isWorker: true // to verifyEmail