@acorex-platform/module-security-management-server 0.0.15 → 2.0.0-next.42

package/contracts/src/entities/users/users.entity.js

@@ -4,21 +4,42 @@ exports.usersFactory = usersFactory;
 const tslib_1 = require("tslib");
 const core_1 = require("@acorex-platform/framework-shared/core");
 const entity_1 = require("@acorex-platform/framework-shared/entity");
-const index_1 = require("../../index");
+const AXM_USER_ACCESS_STATE_DEFINITION_KEY_1 = require("../../AXM_USER_ACCESS_STATE_DEFINITION_KEY");
+const AXM_USER_EFFECTIVE_STATE_DEFINITION_KEY_1 = require("../../AXM_USER_EFFECTIVE_STATE_DEFINITION_KEY");
+const server_commands_1 = require("../../server-commands");
+const user_provisioning_list_actions_1 = require("./user-provisioning-list-actions");
+const USER_ROLES_PAGE_COMPONENT_KEY_1 = require("../../USER_ROLES_PAGE_COMPONENT_KEY");
+const root_config_1 = require("../../root-config");
 function usersFactory() {
     return tslib_1.__awaiter(this, void 0, void 0, function* () {
-        const i18n = index_1.RootConfig.config.i18n;
         const entityDef = {
-            module: index_1.RootConfig.module.name,
-            name: index_1.RootConfig.entities.users.name,
-            title: index_1.RootConfig.entities.users.title,
-            icon: index_1.RootConfig.entities.users.icon,
+            module: root_config_1.RootConfig.module.name,
+            name: root_config_1.RootConfig.entities.users.name,
+            title: root_config_1.RootConfig.entities.users.title,
+            icon: root_config_1.RootConfig.entities.users.icon,
+            searchTags: [
+                'user',
+                'users',
+                'account',
+                'identity',
+                'sign-in',
+                'password',
+                'access-state',
+                'lifecycle',
+                'authorization',
+                'home-tenant',
+                'کاربر',
+                'کاربران',
+                'رمز عبور',
+                'ورود',
+                'حساب کاربری',
+            ],
             formats: {
-                individual: index_1.RootConfig.entities.users.title,
-                plural: index_1.RootConfig.entities.users.titlePlural,
+                individual: root_config_1.RootConfig.entities.users.title,
+                plural: root_config_1.RootConfig.entities.users.titlePlural,
                 searchResult: {
                     title: '{{ displayName }}',
-                    description: `@security-management:users.entities.user.search-result-description`,
+                    description: '{{ context.eval("lastSignInAt", { pipes: ["timeleft"] }) || "@security-management:users.entities.user.fields.last-sign-in-at.never" }}',
                 },
             },
             plugins: [
@@ -38,12 +59,14 @@ function usersFactory() {
                     name: 'status',
                     options: {
                         field: 'accessState',
-                        definition: index_1.AXM_USER_ACCESS_STATE_DEFINITION_KEY,
+                        definition: AXM_USER_ACCESS_STATE_DEFINITION_KEY_1.AXM_USER_ACCESS_STATE_DEFINITION_KEY,
                         isPrimary: false,
                         groupId: 'user-account-access',
                         title: '@security-management:users.entities.user.fields.access-state.title',
                         showInCreate: false,
-                        readonly: false,
+                        // Platform-scoped sign-in gate: display-only on User detail (tenant must not change).
+                        // Platform mutations should go through a dedicated ops path once client isPlatform is available.
+                        readonly: true,
                         generate: { views: { enabled: false } },
                     },
                 },
@@ -51,7 +74,7 @@ function usersFactory() {
                     name: 'status',
                     options: {
                         field: 'effectiveState',
-                        definition: index_1.AXM_USER_EFFECTIVE_STATE_DEFINITION_KEY,
+                        definition: AXM_USER_EFFECTIVE_STATE_DEFINITION_KEY_1.AXM_USER_EFFECTIVE_STATE_DEFINITION_KEY,
                         isPrimary: true,
                         groupId: 'user-account-access',
                         title: '@security-management:users.entities.user.fields.effective-state.title',
@@ -60,11 +83,21 @@ function usersFactory() {
                         generate: { views: { enabled: true } },
                     },
                 },
+                { name: 'unique-fields', options: { fields: 'email', scope: 'global' } },
                 { name: 'history' },
                 { name: 'lock' },
                 { name: 'compare' },
+                { name: 'reports' },
+            ],
+            pages: [
+                {
+                    componentKey: USER_ROLES_PAGE_COMPONENT_KEY_1.USER_ROLES_PAGE_COMPONENT_KEY,
+                    title: '@security-management:users.entities.user.pages.roles.title',
+                    icon: 'fa-light fa-user-tag',
+                    layout: { order: 1, position: 'after' },
+                    appearOn: { create: true, update: true },
+                },
             ],
-            pages: [],
             groups: [
                 {
                     id: 'basic-info',
@@ -75,10 +108,6 @@ function usersFactory() {
                     title: '@general:terms.common.avatar',
                     icon: 'fa-light fa-image',
                 },
-                {
-                    id: 'authorizations',
-                    title: `@${i18n}:users.entities.user.groups.authorizations`,
-                },
                 {
                     id: 'user-account-access',
                     title: '@security-management:users.entities.user.groups.account-access',
@@ -104,6 +133,7 @@ function usersFactory() {
                     },
                     schema: {
                         dataType: 'string',
+                        readonly: '{{ !!context.eval("id") }}',
                         interface: {
                             type: core_1.AXPWidgetsCatalog.text,
                             options: {},
@@ -144,12 +174,132 @@ function usersFactory() {
                         },
                     ],
                 },
+                {
+                    name: 'email',
+                    title: '@general:terms.communication.email',
+                    groupId: 'basic-info',
+                    options: {
+                        filter: {
+                            advance: { enabled: true },
+                            inline: { enabled: true },
+                        },
+                        sort: { enabled: true },
+                    },
+                    schema: {
+                        dataType: 'string',
+                        interface: {
+                            type: core_1.AXPWidgetsCatalog.text,
+                            options: {},
+                        },
+                    },
+                    validations: [{ rule: 'required' }],
+                },
+                {
+                    name: 'rolesList',
+                    title: '@security-management:users.entities.user.fields.roles.title',
+                    groupId: 'basic-info',
+                    schema: {
+                        dataType: 'array',
+                        /**
+                         * Display-only Role snapshots. Not a stored FK — source of truth is
+                         * scoped SecurityManagement.UserRole. Name must not end in Id/Ids so
+                         * the query planner does not join Role from this User document.
+                         */
+                        readonly: true,
+                        visible: false,
+                        interface: {
+                            type: core_1.AXPWidgetsList.Editors.LookupBox,
+                            options: {
+                                entity: `${root_config_1.RootConfig.module.name}.${root_config_1.RootConfig.entities.roles.name}`,
+                                textField: 'title',
+                                valueField: 'id',
+                                multiple: true,
+                                look: 'select',
+                            },
+                        },
+                    },
+                },
+                {
+                    /**
+                     * Display-only (like rolesList). Never persisted on User documents.
+                     * Hydrated from session-tenant TenantUser.statusId (+ acceptedAt → accepted).
+                     */
+                    name: 'membershipStatusId',
+                    title: '@security-management:users.entities.user.fields.membership-status.title',
+                    groupId: 'user-account-access',
+                    schema: {
+                        dataType: 'string',
+                        readonly: true,
+                        nullable: true,
+                        visible: false,
+                        interface: {
+                            type: core_1.AXPWidgetsList.Advanced.Status,
+                            options: {
+                                definitionKey: 'security-management.status.user-invitation',
+                            },
+                        },
+                    },
+                },
+                {
+                    /**
+                     * Hidden view filter marker only; rewritten server-side to TenantUser
+                     * invitation.source invite or join-request. Never persisted on User documents.
+                     */
+                    name: 'membershipInviteScope',
+                    title: '@security-management:users.entities.user.fields.membership-invite-scope.title',
+                    groupId: 'user-account-access',
+                    schema: {
+                        dataType: 'string',
+                        readonly: true,
+                        visible: false,
+                        nullable: true,
+                        interface: {
+                            type: core_1.AXPWidgetsCatalog.text,
+                            options: {},
+                        },
+                    },
+                },
+                {
+                    /**
+                     * Display-only. Hydrated from session-tenant TenantUser.invitation.source.
+                     * Used to show Approve/Reject only for pending join-requests.
+                     */
+                    name: 'membershipInvitationSource',
+                    title: '@security-management:users.entities.user.fields.membership-invitation-source.title',
+                    groupId: 'user-account-access',
+                    schema: {
+                        dataType: 'string',
+                        readonly: true,
+                        visible: false,
+                        nullable: true,
+                        interface: {
+                            type: core_1.AXPWidgetsCatalog.text,
+                            options: {},
+                        },
+                    },
+                },
+                {
+                    name: 'homeTenantId',
+                    title: '@security-management:users.entities.user.fields.home-tenant.title',
+                    groupId: 'basic-info',
+                    schema: {
+                        dataType: 'string',
+                        /** Stamped on create from session; not shown on User forms. */
+                        readonly: true,
+                        visible: false,
+                        interface: {
+                            type: core_1.AXPWidgetsCatalog.text,
+                            options: {},
+                        },
+                    },
+                },
                 {
                     name: 'password',
                     title: '@security-management:users.entities.user.fields.password.title',
-                    groupId: 'authorizations',
+                    groupId: 'basic-info',
                     schema: {
                         dataType: 'string',
+                        visible: false,
                         interface: {
                             type: core_1.AXPWidgetsCatalog.text,
                         },
@@ -173,7 +323,7 @@ function usersFactory() {
                 {
                     name: 'pinCode',
                     title: '@security-management:users.entities.user.fields.pin-code.title',
-                    groupId: 'authorizations',
+                    groupId: 'basic-info',
                     schema: {
                         dataType: 'string',
                         readonly: true,
@@ -184,39 +334,70 @@ function usersFactory() {
                     },
                 },
                 {
-                    name: 'roleIds',
-                    title: '@security-management:users.entities.user.fields.roles.title',
-                    groupId: 'authorizations',
+                    name: 'passwordChangedAt',
+                    title: '@security-management:users.entities.user.fields.password-changed-at.title',
+                    groupId: 'user-account-access',
                     schema: {
-                        dataType: 'object',
+                        dataType: 'date',
+                        readonly: true,
+                        visible: false,
+                        nullable: true,
                         interface: {
-                            type: core_1.AXPWidgetsCatalog.lookup,
-                            options: {
-                                entity: 'SecurityManagement.Role',
-                                multiple: true,
-                                look: 'select',
-                                expose: [
-                                    { source: 'id', target: 'roles.{id}' },
-                                    { source: 'title', target: 'roles.{title}' },
-                                ],
-                                // columnResolve: {
-                                //   strategy: 'countOnly',
-                                //   countFieldPath: 'roles.length',
-                                //   queryKey: 'SecurityManagement:User:RolesForListColumn',
-                                //   queryParams: { userId: 'id' },
-                                //   queryResultItemsPath: 'items',
-                                // },
-                            },
+                            type: core_1.AXPWidgetsCatalog.dateTime,
                         },
                     },
-                    validations: [
-                        {
-                            rule: 'required',
+                },
+                {
+                    name: 'pinChangedAt',
+                    title: '@security-management:users.entities.user.fields.pin-changed-at.title',
+                    groupId: 'user-account-access',
+                    schema: {
+                        dataType: 'date',
+                        readonly: true,
+                        visible: false,
+                        nullable: true,
+                        interface: {
+                            type: core_1.AXPWidgetsCatalog.dateTime,
                         },
-                    ],
+                    },
+                },
+                {
+                    name: 'lastSignInAt',
+                    title: '@security-management:users.entities.user.fields.last-sign-in-at.title',
+                    groupId: 'user-account-access',
+                    schema: {
+                        dataType: 'date',
+                        readonly: true,
+                        visible: false,
+                        nullable: true,
+                        interface: {
+                            type: core_1.AXPWidgetsCatalog.dateTime,
+                        },
+                    },
+                },
+                {
+                    name: 'passwordReset',
+                    title: '@security-management:users.entities.user.fields.password-reset.title',
+                    groupId: 'user-account-access',
+                    schema: {
+                        dataType: 'object',
+                        readonly: true,
+                        visible: false,
+                        nullable: true,
+                        interface: {
+                            type: core_1.AXPWidgetsCatalog.text,
+                        },
+                    },
                 },
             ],
-            columns: [{ name: 'username' }, { name: 'displayName' }, { name: 'roleIds', options: { dataPath: 'roles' } }],
+            columns: [
+                { name: 'username' },
+                { name: 'displayName' },
+                { name: 'email' },
+                { name: 'rolesList' },
+                { name: 'membershipStatusId', options: { visible: false } },
+                { name: 'lastSignInAt', options: { visible: false } },
+            ],
             interfaces: {
                 master: {
                     create: {
@@ -231,62 +412,25 @@ function usersFactory() {
                                 order: 2,
                                 layout: { positions: { lg: { colSpan: 4, colStart: 9 } } },
                             },
-                            {
-                                id: 'authorizations',
-                                order: 3,
-                            },
                         ],
                         properties: [
                             {
                                 name: 'username',
-                                layout: {
-                                    positions: {
-                                        lg: {
-                                            colSpan: 6,
-                                        },
-                                    },
-                                },
+                                layout: { positions: { lg: { colSpan: 6 } } },
                             },
                             {
                                 name: 'displayName',
-                                layout: {
-                                    positions: {
-                                        lg: {
-                                            colSpan: 6,
-                                        },
-                                    },
-                                },
+                                layout: { positions: { lg: { colSpan: 6 } } },
                             },
                             {
-                                name: 'avatar',
-                                layout: {
-                                    label: { visible: false },
-                                    positions: {
-                                        lg: {
-                                            colSpan: 12,
-                                            order: 1,
-                                        },
-                                    },
-                                },
+                                name: 'email',
+                                layout: { positions: { lg: { colSpan: 12 } } },
                             },
                             {
-                                name: 'roleIds',
-                                layout: {
-                                    positions: {
-                                        lg: {
-                                            colSpan: 12,
-                                        },
-                                    },
-                                },
-                            },
-                            {
-                                name: 'password',
+                                name: 'avatar',
                                 layout: {
-                                    positions: {
-                                        lg: {
-                                            colSpan: 12,
-                                        },
-                                    },
+                                    label: { visible: false },
+                                    positions: { lg: { colSpan: 12, order: 1 } },
                                 },
                             },
                         ],
@@ -303,104 +447,31 @@ function usersFactory() {
                                 order: 2,
                                 layout: { positions: { lg: { colSpan: 4, colStart: 9 } } },
                             },
-                            {
-                                id: 'authorizations',
-                                order: 3,
-                                layout: { positions: { lg: { colSpan: 12, colStart: 1 } } },
-                            },
                             {
                                 id: 'user-account-access',
-                                order: 4,
+                                order: 3,
                                 layout: { positions: { lg: { colSpan: 12, colStart: 1 } } },
                             },
                         ],
                         properties: [
-                            {
-                                name: 'username',
-                                layout: {
-                                    positions: {
-                                        lg: {
-                                            colSpan: 6,
-                                        },
-                                    },
-                                },
-                            },
-                            {
-                                name: 'displayName',
-                                layout: {
-                                    positions: {
-                                        lg: {
-                                            colSpan: 6,
-                                        },
-                                    },
-                                },
-                            },
+                            { name: 'username', layout: { positions: { lg: { colSpan: 6 } } } },
+                            { name: 'displayName', layout: { positions: { lg: { colSpan: 6 } } } },
+                            { name: 'email', layout: { positions: { lg: { colSpan: 6 } } } },
                             {
                                 name: 'avatar',
                                 layout: {
                                     label: { visible: false },
-                                    positions: {
-                                        lg: {
-                                            colSpan: 12,
-                                            order: 1,
-                                        },
-                                    },
-                                },
-                            },
-                            {
-                                name: 'roleIds',
-                                layout: {
-                                    positions: {
-                                        lg: {
-                                            colSpan: 12,
-                                        },
-                                    },
-                                },
-                            },
-                            {
-                                name: 'password',
-                                layout: {
-                                    positions: {
-                                        lg: {
-                                            colSpan: 12,
-                                        },
-                                    },
-                                },
-                            },
-                            {
-                                name: 'accountState',
-                                layout: {
-                                    positions: {
-                                        lg: {
-                                            colSpan: 4,
-                                        },
-                                    },
-                                },
-                            },
-                            {
-                                name: 'accessState',
-                                layout: {
-                                    positions: {
-                                        lg: {
-                                            colSpan: 4,
-                                        },
-                                    },
-                                },
-                            },
-                            {
-                                name: 'effectiveState',
-                                layout: {
-                                    positions: {
-                                        lg: {
-                                            colSpan: 4,
-                                        },
-                                    },
+                                    positions: { lg: { colSpan: 12, order: 1 } },
                                 },
                             },
+                            { name: 'accountState', layout: { positions: { lg: { colSpan: 4 } } } },
+                            { name: 'accessState', layout: { positions: { lg: { colSpan: 4 } } } },
+                            { name: 'effectiveState', layout: { positions: { lg: { colSpan: 4 } } } },
                         ],
                     },
                     single: {
                         title: '{{ context.eval("displayName") ?? context.eval("username") }}',
+                        description: '{{ context.eval("lastSignInAt", { pipes: ["timeleft"] }) || "@security-management:users.entities.user.fields.last-sign-in-at.never" }}',
                         sections: [
                             {
                                 id: 'basic-info',
@@ -412,140 +483,127 @@ function usersFactory() {
                                 order: 2,
                                 layout: { positions: { lg: { colSpan: 4, colStart: 9 } } },
                             },
-                            {
-                                id: 'authorizations',
-                                order: 3,
-                                layout: { positions: { lg: { colSpan: 12, colStart: 1 } } },
-                            },
                             {
                                 id: 'user-account-access',
-                                order: 4,
+                                order: 3,
                                 layout: { positions: { lg: { colSpan: 12, colStart: 1 } } },
                             },
                         ],
                         properties: [
-                            {
-                                name: 'username',
-                                layout: {
-                                    positions: {
-                                        lg: {
-                                            colSpan: 6,
-                                        },
-                                    },
-                                },
-                            },
-                            {
-                                name: 'displayName',
-                                layout: {
-                                    positions: {
-                                        lg: {
-                                            colSpan: 6,
-                                        },
-                                    },
-                                },
-                            },
+                            { name: 'username', layout: { positions: { lg: { colSpan: 6 } } } },
+                            { name: 'displayName', layout: { positions: { lg: { colSpan: 6 } } } },
+                            { name: 'email', layout: { positions: { lg: { colSpan: 6 } } } },
                             {
                                 name: 'avatar',
                                 layout: {
                                     label: { visible: false },
-                                    positions: {
-                                        lg: {
-                                            colSpan: 12,
-                                            order: 1,
-                                        },
-                                    },
-                                },
-                            },
-                            {
-                                name: 'password',
-                                layout: {
-                                    positions: {
-                                        lg: {
-                                            colSpan: 12,
-                                        },
-                                    },
-                                },
-                            },
-                            {
-                                name: 'roleIds',
-                                layout: {
-                                    positions: {
-                                        lg: {
-                                            colSpan: 12,
-                                        },
-                                    },
-                                },
-                            },
-                            {
-                                name: 'accountState',
-                                layout: {
-                                    positions: {
-                                        lg: {
-                                            colSpan: 4,
-                                        },
-                                    },
-                                },
-                            },
-                            {
-                                name: 'accessState',
-                                layout: {
-                                    positions: {
-                                        lg: {
-                                            colSpan: 4,
-                                        },
-                                    },
-                                },
-                            },
-                            {
-                                name: 'effectiveState',
-                                layout: {
-                                    positions: {
-                                        lg: {
-                                            colSpan: 4,
-                                        },
-                                    },
+                                    positions: { lg: { colSpan: 12, order: 1 } },
                                 },
                             },
+                            { name: 'accountState', layout: { positions: { lg: { colSpan: 4 } } } },
+                            { name: 'accessState', layout: { positions: { lg: { colSpan: 4 } } } },
+                            { name: 'effectiveState', layout: { positions: { lg: { colSpan: 4 } } } },
+                        ],
+                        actions: [
+                            {
+                                title: '@security-management:users.entities.user.actions.send-password-reset.title',
+                                icon: 'fa-light fa-envelope',
+                                command: server_commands_1.AXM_USER_SEND_PASSWORD_RESET_COMMAND,
+                                priority: 'secondary',
+                                type: 'view',
+                                scope: entity_1.AXPEntityCommandScope.Individual,
+                            },
+                            {
+                                title: '@security-management:users.entities.user.actions.reset-two-factor.title',
+                                icon: 'fa-light fa-shield-keyhole',
+                                command: server_commands_1.AXM_USER_RESET_TWO_FACTOR_COMMAND,
+                                priority: 'secondary',
+                                type: 'view',
+                                scope: entity_1.AXPEntityCommandScope.Individual,
+                            },
+                            {
+                                title: '@security-management:users.entities.user.actions.resend-invitation.title',
+                                icon: 'fa-light fa-paper-plane',
+                                command: server_commands_1.AXM_USER_RESEND_INVITATION_COMMAND,
+                                priority: 'secondary',
+                                type: 'view',
+                                scope: entity_1.AXPEntityCommandScope.Individual,
+                                hidden: '{{ context.eval("membershipStatusId") !== "pending" || context.eval("membershipInvitationSource") !== "invite" }}',
+                            },
+                            {
+                                title: '@security-management:users.entities.user.actions.cancel-invitation.title',
+                                icon: 'fa-light fa-user-xmark',
+                                command: server_commands_1.AXM_USER_CANCEL_INVITATION_COMMAND,
+                                priority: 'secondary',
+                                type: 'view',
+                                scope: entity_1.AXPEntityCommandScope.Individual,
+                                hidden: '{{ context.eval("membershipStatusId") !== "pending" || context.eval("membershipInvitationSource") !== "invite" }}',
+                            },
+                            {
+                                title: '@security-management:users.entities.user.actions.approve-join-request.title',
+                                icon: 'fa-light fa-user-check',
+                                command: server_commands_1.AXM_USER_APPROVE_JOIN_REQUEST_COMMAND,
+                                color: 'success',
+                                priority: 'primary',
+                                type: 'view',
+                                scope: entity_1.AXPEntityCommandScope.Individual,
+                                hidden: '{{ context.eval("membershipStatusId") !== "pending" || context.eval("membershipInvitationSource") !== "join-request" }}',
+                            },
+                            {
+                                title: '@security-management:users.entities.user.actions.reject-join-request.title',
+                                icon: 'fa-light fa-user-xmark',
+                                command: server_commands_1.AXM_USER_REJECT_JOIN_REQUEST_COMMAND,
+                                color: 'warning',
+                                priority: 'primary',
+                                type: 'view',
+                                scope: entity_1.AXPEntityCommandScope.Individual,
+                                hidden: '{{ context.eval("membershipStatusId") !== "pending" || context.eval("membershipInvitationSource") !== "join-request" }}',
+                            },
+                            ...(0, entity_1.entityMasterRecordActions)(),
                         ],
-                        actions: [...(0, entity_1.entityMasterRecordActions)()],
                     },
                     list: {
-                        actions: [...(0, entity_1.entityMasterCrudActions)()],
-                        layouts: {
-                            card: {
-                                enabled: true,
-                                header: {
-                                    title: 'displayName',
-                                    description: 'description',
-                                    icon: 'icon',
-                                },
-                                fields: [
-                                    {
-                                        name: 'displayName',
-                                        title: 'Display Name',
-                                        showAs: {
-                                            type: core_1.AXPWidgetsCatalog.text,
-                                        },
-                                    },
-                                    {
-                                        name: 'roleIds',
-                                    },
+                        actions: [
+                            ...(0, user_provisioning_list_actions_1.userProvisioningListActions)(),
+                            ...(0, entity_1.entityMasterCrudActions)({ create: false }),
+                        ],
+                        views: [
+                            (0, entity_1.createAllQueryView)({
+                                sorts: [{ name: 'displayName', dir: 'asc' }],
+                            }),
+                            (0, entity_1.createQueryView)('invitations', '@security-management:users.entities.user.views.invitations.title', true, {
+                                conditions: [
                                     {
-                                        name: 'username',
+                                        name: 'membershipInviteScope',
+                                        operator: { type: 'equal' },
+                                        value: 'lifecycle',
+                                        hidden: true,
                                     },
                                 ],
-                            },
-                            table: {
-                                enabled: true,
-                                columns: [],
-                            },
-                        },
-                        views: [
-                            (0, entity_1.createAllQueryView)({
+                                columns: [
+                                    'username',
+                                    'displayName',
+                                    'email',
+                                    'membershipStatusId',
+                                    'rolesList',
+                                ],
                                 sorts: [{ name: 'displayName', dir: 'asc' }],
                             }),
                         ],
                     },
+                    card: {
+                        enabled: true,
+                        header: {
+                            title: 'displayName',
+                            description: '{{ context.eval("lastSignInAt", { pipes: ["timeleft"] }) || "@security-management:users.entities.user.fields.last-sign-in-at.never" }}',
+                            avatar: 'avatar',
+                        },
+                        fields: [
+                            { name: 'username', display: 'meta' },
+                            { name: 'email', display: 'meta' },
+                            { name: 'rolesList', display: 'simple' },
+                        ],
+                    },
                 },
             },
         };