Ticket schema defines minimal "user" (without name and other stuff):

  • holds ID (of a user)
  • holds access tokens (for client-side ACL check)