package model // User model type User struct { Username string `json:"username"` Password string `json:"password"` // PasswordHash takes precedence over Password. PasswordHash string `json:"password_hash"` Admin bool `json:"admin"` // ServerIDs restricts a non-admin user to only these servers. // Empty/nil means no server access at all (secure by default). // Admins always have access to every server regardless of this field. ServerIDs []string `json:"server_ids,omitempty"` }