hasPermission('admin/users') !== true) { return ['id', 'email', 'confirmed_at']; } } }