L0 = <http://www.simantics.org/Layer0-1.1>

USERS = <http://Users> : L0.Library
    @L0.new

USER = <http://www.simantics.org/User-1.1> : L0.Ontology
    @L0.new
    L0.HasResourceClass "org.simantics.user.UserResource"
    
USERS.DefaultUser : USER.User
    //@L0.tag L0.ModelUser
    L0.HasLabel "Default User"
    USER.HasPasswordHash "z4PhNX7vuL3xVChQ1m2AB9Yg5AULVxXcg/SpIdNs6c5H0NE8XYXysP+DGNKHfuwvY7kxvUdBeoGlODJ6+SfaPg=="
    L0.HasDescription "Anonymous account."
    USER.HasEmail "anonymous@simantics.org"

USERS.AdminUser : USER.User
    L0.HasLabel "Admin"
    USER.HasPasswordHash "z4PhNX7vuL3xVChQ1m2AB9Yg5AULVxXcg/SpIdNs6c5H0NE8XYXysP+DGNKHfuwvY7kxvUdBeoGlODJ6+SfaPg=="
    L0.HasDescription "Anonymous account."
    USER.HasEmail "anonymous@simantics.org"
    
USER.Group <T L0.Entity
USER.Group.Contains <R L0.IsRelatedTo

USER.AdminUserAdminRoleAssignment : USER.RoleAssignment
  USER.RoleAssignment.HasGroup USERS.AdminUser
  USER.RoleAssignment.HasRole USER.Admin

USER.AdminUserModelUserRoleAssignment : USER.RoleAssignment
  USER.RoleAssignment.HasGroup USERS.AdminUser
  USER.RoleAssignment.HasRole USER.ModelUser

USER.User <T USER.Group
    @L0.singleProperty L0.HasName
    @L0.singleProperty L0.HasDescription
    @L0.singleProperty USER.HasPasswordHash
    @L0.singleProperty USER.HasEmail
    
USER.HasPasswordHash <R L0.HasProperty
    L0.HasRange L0.String
USER.HasEmail <R L0.HasProperty
    L0.HasRange L0.String

USER.Admin : USER.Role
USER.KernelDeveloper : USER.Role
USER.LibraryDeveloper : USER.Role
USER.ModelConfigurator : USER.Role
USER.ModelUser : USER.Role
USER.DefaultRole : USER.Role
        
USER.Role <T L0.Entity
USER.Role.Inherits <R L0.IsRelatedTo

USER.RoleAssignment <T L0.Entity
USER.RoleAssignment.HasRole <R L0.IsRelatedTo
USER.RoleAssignment.HasGroup <R L0.IsRelatedTo

USER.RoleSelection <T L0.Entity
USER.RoleSelection.HasModel <R L0.IsRelatedTo
USER.RoleSelection.HasRole <R L0.IsRelatedTo