{
	"name": "VnUser",
	"base": "User",
	"validateUpsert": true,
	"options": {
		"mysql": {
			"table": "account.user"
		}
	},
    "resetPasswordTokenTTL": "604800",
	"properties": {
		"id": {
			"type": "number",
			"id": true
		},
		"name": {
			"type": "string",
			"required": true
		},
		"username": {
			"type": "string",
			"mysql": {
				"columnName": "name"
			}
		},
		"password": {
			"type": "string",
			"required": true,
			"mysql": {
				"columnName": "bcryptPassword"
			}
		},
		"roleFk": {
			"type": "number",
			"mysql": {
				"columnName": "role"
			}
		},
		"nickname": {
			"type": "string"
		},
		"lang": {
			"type": "string"
		},
		"bcryptPassword": {
			"type": "string"
		},
		"active": {
			"type": "boolean"
		},
		"email": {
			"type": "string"
		},
		"created": {
			"type": "date"
		},
		"updated": {
			"type": "date"
		},
		"image": {
			"type": "string"
		},
		"hasGrant": {
			"type": "boolean"
		},
        "passExpired": {
            "type": "date"
        }
	},
	"relations": {
		"role": {
			"type": "belongsTo",
			"model": "Role",
			"foreignKey": "roleFk"
		},
		"roles": {
			"type": "hasMany",
			"model": "RoleRole",
			"foreignKey": "role",
			"primaryKey": "roleFk"
		},
		"emailUser": {
			"type": "hasOne",
			"model": "EmailUser",
			"foreignKey": "userFk"
		},
		"worker": {
			"type": "hasOne",
			"model": "Worker",
			"foreignKey": "userFk"
		},
		"userConfig": {
			"type": "hasOne",
			"model": "UserConfig",
			"foreignKey": "userFk"
		}
	},
	"acls": [
		{
			"property": "signIn",
			"accessType": "EXECUTE",
			"principalType": "ROLE",
			"principalId": "$everyone",
			"permission": "ALLOW"
        },
        {
            "property": "recoverPassword",
            "accessType": "EXECUTE",
            "principalType": "ROLE",
            "principalId": "$everyone",
            "permission": "ALLOW"
        },
		{
            "property": "validateToken",
			"accessType": "EXECUTE",
			"principalType": "ROLE",
			"principalId": "$authenticated",
			"permission": "ALLOW"
		},
		{
			"property": "privileges",
			"accessType": "*",
			"principalType": "ROLE",
			"principalId": "$authenticated",
			"permission": "ALLOW"
		}
	]
}