{
  "name": "Ticket",
  "base": "PersistedModel",
  "validateUpsert": true,
  "properties": {},
  "acls": [
    {
      "accessType": "*",
      "principalType": "ROLE",
      "principalId": "$everyone",
      "permission": "DENY"
    },
    {
      "accessType": "*",
      "principalType": "ROLE",
      "principalId": "root",
      "permission": "ALLOW"
    }
  ]
}