added all permissions; added all routes; users controller and business

src/Auth/Business/LuUsersBusiness.php

@@ -8,13 +8,15 @@
 
 namespace Luticate\Auth\Business;
 
-use Illuminate\Database\Query\Builder;
 use Luticate\Auth\DataAccess\LuUserDataAccess;
-use Luticate\Auth\Dbo\LuUsersDbo;
-use Luticate\Auth\Dbo\LuUsersLiteDbo;
-use Luticate\Auth\Dbo\LuUsersLoginDbo;
-use Luticate\Auth\Dbo\LuUsersLoginResultDbo;
+use Luticate\Auth\Dbo\Users\LuUsersAddDbo;
+use Luticate\Auth\Dbo\Users\LuUsersDbo;
+use Luticate\Auth\Dbo\Users\LuUsersEditDbo;
+use Luticate\Auth\Dbo\Users\LuUsersLiteDbo;
+use Luticate\Auth\Dbo\Users\LuUsersLoginDbo;
+use Luticate\Auth\Dbo\Users\LuUsersLoginResultDbo;
 use Luticate\Utils\Business\LuBusiness;
+use Luticate\Utils\Dbo\LuPaginatedDbo;
 use Luticate\Utils\Dbo\LuQueryDbo;
 
 class LuUsersBusiness extends LuBusiness
@@ -31,22 +33,29 @@ class LuUsersBusiness extends LuBusiness
         return new LuUserDataAccess();
     }
 
-    protected static function badPassword()
+    protected function badPassword()
     {
         static::unauthorized("Bad username/password");
     }
 
-    public static function hashPassword($password)
+    public function hashPassword(string $password)
     {
         return password_hash($password, PASSWORD_BCRYPT);
     }
 
-    public static function verifyPassword($password, $hash)
+    public function verifyPassword(string $password, string $hash)
     {
         return password_verify($password, $hash);
     }
 
-    public static function getSalt($length = 10)
+    public function checkPasswordRequirements(string $password)
+    {
+        if (strlen($password) < 5) { //TODO: add a setting
+            self::badInput("Password must have at least 5 characters");
+        }
+    }
+
+    public function getSalt($length = 10)
     {
         $characters = '0123456789abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ';
         $charactersLength = strlen($characters);
@@ -57,14 +66,9 @@ class LuUsersBusiness extends LuBusiness
         return $randomString;
     }
 
-    /**
-     * @param $user LuUsersDbo
-     * @param $data mixed
-     * @return string
-     */
-    public static function getToken($user, $data = null)
+    public function getToken(LuUsersDbo $user, $data = null)
     {
-        $session_time = 30;//LuticateSettingsBusiness::getValue("LU_SESSION_DAYS");
+        $session_time = 30;//TODO add a setting
         return JwtHelper::encode(array(
             self::KEY_USER_ID => $user->getId(),
             self::KEY_SALT => $user->getSalt(),
@@ -72,7 +76,7 @@ class LuUsersBusiness extends LuBusiness
         ), $session_time);
     }
 
-    public static function login(LuUsersLoginDbo $login)
+    public function login(LuUsersLoginDbo $login)
     {
         $user = static::getDataAccess()->getByUsernameOrEmail($login->getUsername());
         if (is_null($user))
@@ -88,7 +92,7 @@ class LuUsersBusiness extends LuBusiness
         return $result;
     }
 
-    public static function logout(LuUsersDbo $user)
+    public function logout(LuUsersDbo $user)
     {
         if ($user->getId() != 0) {
             $user->setSalt(self::getSalt());
@@ -97,18 +101,116 @@ class LuUsersBusiness extends LuBusiness
         return true;
     }
 
+    public function getSingleLiteById($userId)
+    {
+        /**
+         * @var $user LuUsersDbo
+         */
+        $user = static::getById($userId);
+        return $user->toLite();
+    }
+
     /**
      * @param LuQueryDbo $query
-     * @return LuUsersLiteDbo[]
+     * @return LuPaginatedDbo
      */
-    public static function getAllLite(LuQueryDbo $query)
+    public function getAllLite(LuQueryDbo $query)
     {
         return static::getDataAccess()->getAll($query)->map(function($user)
         {
             /**
              * @var $user LuUsersDbo
              */
-            return $user->castAs(LuUsersLiteDbo::class);
+            return $user->toLite();
         });
     }
+
+    public function add(LuUsersAddDbo $user)
+    {
+        static::checkPasswordRequirements($user->getPassword());
+
+        if (filter_var($user->getUsername(), FILTER_VALIDATE_EMAIL)) {
+            self::badInput("Username can not be an email");
+        }
+        if (!preg_match("/^[A-Za-z0-9\\-_\\.]+$/", $user->getUsername())) {
+            self::badInput("Username can only contain letters (A-Z a-z), numbers (0-9), hyphen (-), underscore (_) and dot (.)");
+        }
+        if (!filter_var($user->getEmail(), FILTER_VALIDATE_EMAIL)) {
+            self::badInput("Invalid email address");
+        }
+        $existingUser = static::getDataAccess()->getByUsernameOrEmail($user->getUsername());
+        if ($existingUser != null) {
+            self::badInput("Username already exists");
+        }
+        $existingUser = static::getDataAccess()->getByUsernameOrEmail($user->getEmail());
+        if ($existingUser != null) {
+            self::badInput("Email already used");
+        }
+        $user->setPassword(self::hashPassword($user->getPassword()));
+        $user->setExternalAuth(null);
+        $user->setProfileId(null);
+
+        /**
+         * @var LuUsersDbo $newUser
+         */
+        $newUser = $user->castAs(LuUsersDbo::class);
+        $newUser->setSalt(static::getSalt());
+
+        $id = static::getDataAccess()->addSingleId($newUser);
+        return self::getById($id);
+    }
+
+    public function del(int $userId)
+    {
+        $user = static::getSingleLiteById($userId);
+        if ($userId != 0) {
+            static::deleteById($user->getId());
+        }
+        return $user;
+    }
+
+    public function edit(int $userId, LuUsersEditDbo $user)
+    {
+        $existingUser = static::getSingleLiteById($userId);
+        if (!filter_var($user->getEmail(), FILTER_VALIDATE_EMAIL)) {
+            self::badInput("Invalid email address");
+        }
+        $anotherExistingUser = static::getDataAccess()->getByUsernameOrEmail($user->getEmail());
+        if ($anotherExistingUser != null && $anotherExistingUser->getId() != $existingUser->getId()) {
+            self::badInput("Email already used");
+        }
+
+        $existingUser->setEmail($user->getEmail());
+        $existingUser->setFirstname($user->getFirstname());
+        $existingUser->setLastname($user->getLastname());
+
+        static::getDataAccess()->editSingleById($existingUser);
+
+        return static::getSingleLiteById($existingUser->getId());
+    }
+
+    public function setPassword(int $userId, string $password)
+    {
+        $this->checkPasswordRequirements($password);
+
+        /**
+         * @var $existingUser LuUsersDbo
+         */
+        $existingUser = static::getDataAccess()->getSingleById($userId);
+        $existingUser->setPassword(static::hashPassword($password));
+        $existingUser->setSalt(static::getSalt());
+
+        static::getDataAccess()->editSingleById($existingUser);
+
+        return true;
+    }
+
+    public function setPasswordMe(LuUsersDbo $_user, string $password, string $oldPassword)
+    {
+        $loginDbo = new LuUsersLoginDbo();
+        $loginDbo->setUsername($_user->getUsername());
+        $loginDbo->setPassword($oldPassword);
+        static::login($loginDbo);
+        return static::setPassword($_user->getId(), $password);
+    }
 }

src/Auth/Controller/LuAuthController.php

@@ -0,0 +1,144 @@
+<?php
+/**
+ * Created by PhpStorm.
+ * User: robin
+ * Date: 9/17/16
+ * Time: 6:02 PM
+ */
+
+namespace Luticate\Auth\Controller;
+
+
+use Luticate\Auth\Dbo\LuBuiltInPermissions;
+use Luticate\Utils\Business\LuStringUtils;
+use Luticate\Utils\Controller\LuRoute;
+
+class LuAuthController
+{
+    private $_route = null;
+
+    private $_prefix = null;
+
+    private $_namespace = 'Luticate\Auth\Controller\\';
+
+    /**
+     * @param LuRoute $route
+     * @param string $prefix
+     */
+    function __construct(LuRoute $route, $prefix = '/luticate/')
+    {
+        $this->_route = $route;
+        if (!LuStringUtils::endsWith($prefix, '/')) {
+            $prefix .= '/';
+        }
+        $this->_prefix = $prefix;
+    }
+
+    function setup()
+    {
+        $int = LuRoute::REG_UINT;
+        $name = "[A-Z0-9_]+";
+
+        $user_id = "{user_id:$int}";
+        $group_id = "{group_id:$int}";
+        $permission_name = "{permission_name:$name}";
+        $setting_name = "{setting_name:$name}";
+
+        $this->post("users/login", "LuUsersController", "login");
+        $this->post("users/logout", "LuUsersController", "logout");
+        $this->get("users/me", "LuUsersController", "getMe");
+        $this->get("users/$user_id", "LuUsersController", "getById", LuBuiltInPermissions::USER_GET);
+        $this->get("users", "LuUsersController", "getAll", LuBuiltInPermissions::USER_LIST);
+        $this->post("users/add", "LuUsersController", "add", LuBuiltInPermissions::USER_ADD);
+        $this->post("users/$user_id/del", "LuUsersController", "del", LuBuiltInPermissions::USER_DEL);
+        $this->post("users/$user_id/edit", "LuUsersController", "edit", LuBuiltInPermissions::USER_EDIT);
+        $this->post("users/me/edit", "LuUsersController", "editMe", LuBuiltInPermissions::USER_EDIT_ME);
+        $this->post("users/$user_id/setPassword", "LuUsersController", "setPassword", LuBuiltInPermissions::USER_SET_PASSWORD);
+        $this->post("users/me/setPassword", "LuUsersController", "setPasswordMe", LuBuiltInPermissions::USER_SET_PASSWORD_ME);
+
+
+        $this->get("groups/$group_id", "LuGroupsController", "getById", LuBuiltInPermissions::GROUP_GET);
+        $this->get("groups", "LuGroupsController", "getAll", LuBuiltInPermissions::GROUP_LIST);
+        $this->post("groups/add", "LuGroupsController", "add", LuBuiltInPermissions::GROUP_ADD);
+        $this->post("groups/$group_id/del", "LuGroupsController", "del", LuBuiltInPermissions::GROUP_DEL);
+        $this->post("groups/$group_id/edit", "LuGroupsController", "edit", LuBuiltInPermissions::GROUP_EDIT);
+
+        $this->get("groups/$group_id/users/", "LuGroupsController", "getUsers", LuBuiltInPermissions::GROUP_GET);
+        $this->post("groups/$group_id/users/$user_id/add", "LuGroupsController", "addUser", LuBuiltInPermissions::GROUP_USER_ADD);
+        $this->post("groups/$group_id/users/$user_id/del", "LuGroupsController", "delUser", LuBuiltInPermissions::GROUP_USER_DEL);
+
+
+        $this->get("permissions/effective/$user_id/$permission_name", "LuPermissionsController",
+            "getEffectivePermission", LuBuiltInPermissions::PERM_EFFECTIVE_GET);
+        $this->get("permissions/effective/$user_id", "LuPermissionsController",
+            "getAllEffectivePermission", LuBuiltInPermissions::PERM_EFFECTIVE_GET);
+        $this->get("permissions/effective/me/$permission_name", "LuPermissionsController", "getEffectivePermissionMe");
+        $this->get("permissions/effective/me", "LuPermissionsController", "getAllEffectivePermissionMe");
+
+        $this->get("permissions/$permission_name", "LuPermissionsController", "get", LuBuiltInPermissions::PERM_GET);
+        $this->get("permissions", "LuPermissionsController", "getAll", LuBuiltInPermissions::PERM_LIST);
+        $this->post("permissions/add/$permission_name", "LuPermissionsController", "add", LuBuiltInPermissions::PERM_ADD);
+        $this->post("permissions/$permission_name/del", "LuPermissionsController", "del", LuBuiltInPermissions::PERM_DEL);
+        $this->post("permissions/$permission_name/edit", "LuPermissionsController", "edit", LuBuiltInPermissions::PERM_EDIT);
+
+        $this->get("permissions/group/$group_id/$permission_name", "LuPermissionsGroupsController",
+            "get", LuBuiltInPermissions::PERM_GROUP_GET);
+        $this->get("permissions/group/$group_id", "LuPermissionsGroupsController",
+            "getAllByGroup", LuBuiltInPermissions::PERM_GROUP_LIST);
+        $this->post("permissions/group/$group_id/add/$permission_name", "LuPermissionsGroupsController",
+            "add", LuBuiltInPermissions::PERM_GROUP_ADD);
+        $this->post("permissions/group/$group_id/$permission_name/del", "LuPermissionsGroupsController",
+            "del", LuBuiltInPermissions::PERM_GROUP_DEL);
+        $this->post("permissions/group/$group_id/$permission_name/edit", "LuPermissionsGroupsController",
+            "edit", LuBuiltInPermissions::PERM_GROUP_EDIT);
+
+        $this->get("permissions/user/$user_id/$permission_name", "LuPermissionsUsersController",
+            "get", LuBuiltInPermissions::PERM_USER_GET);
+        $this->get("permissions/user/$user_id", "LuPermissionsUsersController",
+            "getAllByUser", LuBuiltInPermissions::PERM_USER_LIST);
+        $this->post("permissions/user/$user_id/add/$permission_name", "LuPermissionsUsersController",
+            "add", LuBuiltInPermissions::PERM_USER_ADD);
+        $this->post("permissions/user/$user_id/$permission_name/del", "LuPermissionsUsersController",
+            "del", LuBuiltInPermissions::PERM_USER_DEL);
+        $this->post("permissions/user/$user_id/$permission_name/edit", "LuPermissionsUsersController",
+            "edit", LuBuiltInPermissions::PERM_USER_EDIT);
+
+
+        $this->get("settings/effective/$user_id/$setting_name", "LuSettingsController",
+            "getEffectiveSetting", LuBuiltInPermissions::SETTING_EFFECTIVE_GET);
+        $this->get("settings/effective/$user_id", "LuSettingsController",
+            "getAllEffectiveSetting", LuBuiltInPermissions::SETTING_GET);
+        $this->get("settings/effective/me/$setting_name", "LuSettingsController", "getEffectiveSettingMe");
+        $this->get("settings/effective/me", "LuSettingsController", "getAllEffectiveSettingMe");
+
+        $this->get("settings/$setting_name", "LuSettingsController", "get", LuBuiltInPermissions::SETTING_GET);
+        $this->get("settings", "LuSettingsController", "getAll", LuBuiltInPermissions::SETTING_GET);
+        $this->post("settings/add", "LuSettingsController", "add", LuBuiltInPermissions::SETTING_ADD);
+        $this->post("settings/$setting_name/del", "LuSettingsController", "del", LuBuiltInPermissions::SETTING_DEL);
+        $this->post("settings/$setting_name/edit", "LuSettingsController", "edit", LuBuiltInPermissions::SETTING_EDIT);
+
+        $this->get("settings/user/$user_id/$setting_name", "LuSettingsUsersController",
+            "get", LuBuiltInPermissions::SETTING_USER_GET);
+        $this->get("settings/user/$user_id", "LuSettingsUsersController",
+            "getAllByUser", LuBuiltInPermissions::SETTING_USER_GET);
+        $this->post("settings/user/$user_id/$setting_name/edit", "LuSettingsUsersController",
+            "edit", LuBuiltInPermissions::SETTING_USER_EDIT);
+        $this->post("settings/user/me/$setting_name/edit", "LuSettingsUsersController",
+            "editMe", LuBuiltInPermissions::SETTING_EDIT_ME);
+    }
+
+    function get(string $url, string $controller, string $method, string ...$permissions)
+    {
+        $this->_route->get($this->_prefix . $url, $this->_namespace . $controller, $method, ["permissions" => $permissions]);
+    }
+
+    function post(string $url, string $controller, string $method, string ...$permissions)
+    {
+        $this->_route->post($this->_prefix . $url, $this->_namespace . $controller, $method, ["permissions" => $permissions]);
+    }
+
+    function delete(string $url, string $controller, string $method, string ...$permissions)
+    {
+        $this->_route->delete($this->_prefix . $url, $this->_namespace . $controller, $method, ["permissions" => $permissions]);
+    }
+}

src/Auth/Controller/LuUsersController.php

@@ -9,10 +9,12 @@
 namespace Luticate\Auth\Controller;
 
 use Luticate\Auth\Business\LuUsersBusiness;
-use Luticate\Auth\Dbo\LuUsersDbo;
-use Luticate\Auth\Dbo\LuUsersLiteDbo;
-use Luticate\Auth\Dbo\LuUsersLoginDbo;
-use Luticate\Auth\Dbo\LuUsersLoginResultDbo;
+use Luticate\Auth\Dbo\Users\LuUsersDbo;
+use Luticate\Auth\Dbo\Users\LuUsersEditDbo;
+use Luticate\Auth\Dbo\Users\LuUsersLiteDbo;
+use Luticate\Auth\Dbo\Users\LuUsersLoginDbo;
+use Luticate\Auth\Dbo\Users\LuUsersLoginResultDbo;
+use Luticate\Auth\Dbo\Users\LuUsersAddDbo;
 use Luticate\Utils\Controller\LuController;
 use Luticate\Utils\Dbo\LuQueryDbo;
 
@@ -34,7 +36,7 @@ class LuUsersController extends LuController
     }
 
     /**
-     * Logout the logged user
+     * Logout the logged user. All tokens will be revoked
      * @param $_user LuUsersDbo The logged user
      * @return bool
      */
@@ -43,13 +45,98 @@ class LuUsersController extends LuController
         return static::getBusiness()->logout($_user);
     }
 
+    /**
+     * Get the logged user
+     * @param $_user LuUsersDbo The user id
+     * @return LuUsersLiteDbo
+     */
+    public function getMe(LuUsersDbo $_user)
+    {
+        return static::getBusiness()->getSingleLiteById($_user->getId());
+    }
+
+    /**
+     * Get a user by its id
+     * @param $userId int The user id
+     * @return LuUsersLiteDbo
+     */
+    public function getById(int $userId)
+    {
+        return static::getBusiness()->getSingleLiteById($userId);
+    }
+
     /**
      * Get all users
      * @param LuQueryDbo $query The filter query
      * @return LuUsersLiteDbo[]
      */
-    public function getAllLite(LuQueryDbo $query)
+    public function getAll(LuQueryDbo $query)
     {
         return static::getBusiness()->getAllLite($query);
     }
+
+    /**
+     * Add a new user
+     * @param LuUsersAddDbo $user The new user
+     * @return LuUsersLiteDbo
+     */
+    public function add(LuUsersAddDbo $user)
+    {
+        return static::getBusiness()->add($user);
+    }
+
+    /**
+     * Delete a user by its id
+     * @param $userId int The user id
+     * @return LuUsersDbo
+     */
+    public function del(int $userId)
+    {
+        return static::getBusiness()->del($userId);
+    }
+
+    /**
+     * Edit a user by its id
+     * @param int $userId The user id
+     * @param LuUsersEditDbo $user The edited user
+     * @return LuUsersDbo
+     */
+    public function edit(int $userId, LuUsersEditDbo $user)
+    {
+        return static::getBusiness()->edit($userId, $user);
+    }
+
+    /**
+     * Edit the logged user
+     * @param LuUsersDbo $_user The logged user
+     * @param LuUsersEditDbo $user The edited user
+     * @return LuUsersDbo
+     */
+    public function editMe(LuUsersDbo $_user, LuUsersEditDbo $user)
+    {
+        return static::getBusiness()->edit($_user->getId(), $user);
+    }
+
+    /**
+     * Set the user's password by its id
+     * @param int $userId The user id
+     * @param string $password Ths new user password
+     * @return bool
+     */
+    public function setPassword(int $userId, string $password)
+    {
+        return static::getBusiness()->setPassword($userId, $password);
+    }
+
+    /**
+     * Set the logged user's password
+     * @param LuUsersDbo $_user The logged user
+     * @param string $password The new user password
+     * @param string $oldPassword The current user password
+     * @return bool
+     */
+    public function setPasswordMe(LuUsersDbo $_user, string $password, string $oldPassword)
+    {
+        return static::getBusiness()->setPasswordMe($_user, $password, $oldPassword);
+    }
 }

src/Auth/DataAccess/LuUserDataAccess.php

@@ -10,7 +10,7 @@ namespace Luticate\Auth\DataAccess;
 
 
 use Illuminate\Database\Query\Builder;
-use Luticate\Auth\Dbo\LuUsersDbo;
+use Luticate\Auth\Dbo\Users\LuUsersDbo;
 use Luticate\Utils\DataAccess\LuDataAccess;
 use Luticate\Utils\Dbo\LuQueryDbo;
 
@@ -31,7 +31,7 @@ class LuUserDataAccess extends LuDataAccess
             /**
              * @var $q Builder
              */
-            $q->where("username", "=", $username)->orWhere("email", "=", $username);
+            $q->where("username", "=", $username)->orWhere("email", "=", $username);//TODO lowercase
             return $q;
         });
     }

src/Auth/Dbo/LuBuiltInPermissions.php

@@ -12,4 +12,55 @@ namespace Luticate\Auth\Dbo;
 class LuBuiltInPermissions
 {
     const USER_LOGIN = "LU_USER_LOGIN";
+    const USER_GET = "LU_USER_GET";
+    const USER_LIST = "LU_USER_LIST";
+    const USER_ADD = "LU_USER_ADD";
+    const USER_DEL = "LU_USER_DEL";
+    const USER_EDIT = "LU_USER_EDIT";
+    const USER_EDIT_ME = "LU_USER_EDIT_ME";
+    const USER_SET_PASSWORD = "LU_USER_SET_PASSWORD";
+    const USER_SET_PASSWORD_ME = "LU_USER_SET_PASSWORD_ME";
+
+
+    const GROUP_GET = "LU_GROUP_GET";
+    const GROUP_LIST = "LU_GROUP_LIST";
+    const GROUP_ADD = "LU_GROUP_ADD";
+    const GROUP_DEL = "LU_GROUP_DEL";
+    const GROUP_EDIT = "LU_GROUP_EDIT";
+
+    const GROUP_USER_ADD = "LU_GROUP_USER_ADD";
+    const GROUP_USER_DEL = "LU_GROUP_USER_DEL";
+
+
+    const PERM_EFFECTIVE_GET = "LU_PERM_EFFECTIVE_GET";
+    const PERM_GET = "LU_PERM_GET";
+    const PERM_LIST = "LU_PERM_LIST";
+    const PERM_ADD = "LU_PERM_ADD";
+    const PERM_EDIT = "LU_PERM_EDIT";
+    const PERM_DEL = "LU_PERM_DEL";
+
+    const PERM_GROUP_GET = "LU_PERM_GROUP_GET";
+    const PERM_GROUP_LIST = "LU_PERM_GROUP_LIST";
+    const PERM_GROUP_ADD = "LU_PERM_GROUP_ADD";
+    const PERM_GROUP_EDIT = "LU_PERM_GROUP_EDIT";
+    const PERM_GROUP_DEL = "LU_PERM_GROUP_DEL";
+
+    const PERM_USER_GET = "LU_PERM_USER_GET";
+    const PERM_USER_LIST = "LU_PERM_USER_LIST";
+    const PERM_USER_ADD = "LU_PERM_USER_ADD";
+    const PERM_USER_EDIT = "LU_PERM_USER_EDIT";
+    const PERM_USER_DEL = "LU_PERM_USER_DEL";
+
+
+    const SETTING_EFFECTIVE_GET = "LU_SETTING_EFFECTIVE_GET";
+    const SETTING_GET = "LU_SETTING_GET";
+    const SETTING_LIST = "LU_SETTING_LIST";
+    const SETTING_ADD = "LU_SETTING_ADD";
+    const SETTING_EDIT = "LU_SETTING_EDIT";
+    const SETTING_DEL = "LU_SETTING_DEL";
+
+    const SETTING_USER_GET = "LU_SETTING_USER_GET";
+    const SETTING_USER_LIST = "LU_SETTING_USER_LIST";
+    const SETTING_USER_EDIT = "LU_SETTING_USER_EDIT";
+    const SETTING_EDIT_ME = "LU_SETTING_EDIT_ME";
 }

src/Auth/Dbo/Users/LuUsersAddDbo.php

@@ -0,0 +1,99 @@
+<?php
+/**
+ * Created by PhpStorm.
+ * User: robin
+ * Date: 9/17/16
+ * Time: 7:58 PM
+ */
+
+namespace Luticate\Auth\Dbo\Users;
+
+
+class LuUsersAddDbo extends LuUsersEditDbo
+{
+    /**
+     * @var $_username string
+     */
+    protected $_username;
+
+    /**
+     * @var $_profileId int
+     * @nullable
+     */
+    protected $_profileId;
+
+    /**
+     * @var $_externalAuth int
+     * @nullable
+     */
+    protected $_externalAuth;
+
+    /**
+     * @var $_password string
+     */
+    protected $_password;
+
+    /**
+     * @return string
+     */
+    public function getUsername()
+    {
+        return $this->_username;
+    }
+
+    /**
+     * @param string $username
+     */
+    public function setUsername($username)
+    {
+        $this->_username = $username;
+    }
+
+    /**
+     * @return int
+     */
+    public function getProfileId()
+    {
+        return $this->_profileId;
+    }
+
+    /**
+     * @param int $profileId
+     */
+    public function setProfileId($profileId)
+    {
+        $this->_profileId = $profileId;
+    }
+
+    /**
+     * @return int
+     */
+    public function getExternalAuth()
+    {
+        return $this->_externalAuth;
+    }
+
+    /**
+     * @param int $externalAuth
+     */
+    public function setExternalAuth($externalAuth)
+    {
+        $this->_externalAuth = $externalAuth;
+    }
+
+    /**
+     * @return string
+     */
+    public function getPassword()
+    {
+        return $this->_password;
+    }
+
+    /**
+     * @param string $password
+     */
+    public function setPassword(string $password)
+    {
+        $this->_password = $password;
+    }
+}

src/Auth/Dbo/LuUsersDbo.php → src/Auth/Dbo/Users/LuUsersDbo.php

@@ -6,7 +6,7 @@
  * Time: 4:36 PM
  */
 
-namespace Luticate\Auth\Dbo;
+namespace Luticate\Auth\Dbo\Users;
 
 use Luticate\Utils\Dbo\LuDbo;
 
@@ -206,4 +206,12 @@ class LuUsersDbo extends LuDbo
     {
         $this->_lastname = $lastname;
     }
+
+    /**
+     * @return LuUsersLiteDbo
+     */
+    public function toLite()
+    {
+        return $this->castAs(LuUsersLiteDbo::class);
+    }
 }

src/Auth/Dbo/Users/LuUsersEditDbo.php

@@ -0,0 +1,80 @@
+<?php
+/**
+ * Created by PhpStorm.
+ * User: robin
+ * Date: 9/17/16
+ * Time: 8:10 PM
+ */
+
+namespace Luticate\Auth\Dbo\Users;
+
+
+use Luticate\Utils\Dbo\LuDbo;
+
+class LuUsersEditDbo extends LuDbo
+{
+    /**
+     * @var $_email string
+     */
+    protected $_email;
+
+    /**
+     * @var $_firstname string
+     * @nullable
+     */
+    protected $_firstname;
+
+    /**
+     * @var $_lastname string
+     * @nullable
+     */
+    protected $_lastname;
+
+    /**
+     * @return string
+     */
+    public function getEmail()
+    {
+        return $this->_email;
+    }
+
+    /**
+     * @param string $email
+     */
+    public function setEmail($email)
+    {
+        $this->_email = $email;
+    }
+
+    /**
+     * @return string
+     */
+    public function getFirstname()
+    {
+        return $this->_firstname;
+    }
+
+    /**
+     * @param string $firstname
+     */
+    public function setFirstname($firstname)
+    {
+        $this->_firstname = $firstname;
+    }
+
+    /**
+     * @return string
+     */
+    public function getLastname()
+    {
+        return $this->_lastname;
+    }
+
+    /**
+     * @param string $lastname
+     */
+    public function setLastname($lastname)
+    {
+        $this->_lastname = $lastname;
+    }
+}

src/Auth/Dbo/LuUsersLiteDbo.php → src/Auth/Dbo/Users/LuUsersLiteDbo.php

@@ -6,7 +6,7 @@
  * Time: 1:52 PM
  */
 
-namespace Luticate\Auth\Dbo;
+namespace Luticate\Auth\Dbo\Users;
 
 use Luticate\Utils\Dbo\LuDbo;
 
@@ -162,6 +162,5 @@ class LuUsersLiteDbo extends LuDbo
     {
         $this->_lastname = $lastname;
     }
-    
-    
+
 }

src/Auth/Dbo/LuUsersLoginDbo.php → src/Auth/Dbo/Users/LuUsersLoginDbo.php

@@ -6,7 +6,7 @@
  * Time: 4:46 PM
  */
 
-namespace Luticate\Auth\Dbo;
+namespace Luticate\Auth\Dbo\Users;
 
 
 use Luticate\Utils\Dbo\LuDbo;

src/Auth/Dbo/LuUsersLoginResultDbo.php → src/Auth/Dbo/Users/LuUsersLoginResultDbo.php

@@ -6,7 +6,7 @@
  * Time: 4:53 PM
  */
 
-namespace Luticate\Auth\Dbo;
+namespace Luticate\Auth\Dbo\Users;
 
 class LuUsersLoginResultDbo extends LuUsersLiteDbo
 {