From fd77af3cfd41358313e8c027e4409ae12a3da6e3 Mon Sep 17 00:00:00 2001
From: eneller <erikneller@gmx.de>
Date: Thu, 30 Jul 2026 17:30:46 +0200
Subject: [PATCH] doc: use cases

---
 docs/design/use-cases.md | 22 ++++++++++++++++++++++
 server/src/model/user.ts |  1 -
 2 files changed, 22 insertions(+), 1 deletion(-)
 create mode 100644 docs/design/use-cases.md

diff --git a/docs/design/use-cases.md b/docs/design/use-cases.md
new file mode 100644
index 0000000..8d0681b
--- /dev/null
+++ b/docs/design/use-cases.md
@@ -0,0 +1,22 @@
+# Use Cases
+
+## Client
+The client pays a business or peer by scanning their QR code or clicking their URL.
+They are then shown the payment (send) screen that already contains the prefilled recipient and currency amount.
+The client then confirms payment with a button and optional confirmation dialog.
+
+## Business
+The business requests payment from a client by sharing their URL / QR code.
+The client proceeds with the `Client` flow.
+
+## Border Control
+
+## Visitor
+Visitors obtain access by receiving credentials of a predefined visitor account.
+Upon login, they participate freely in the payment process as described by `Client` and `Business`.
+
+## Administration
+
+
+## Onboarding
+Initial onboarding is performed by an administrator using a batch import feature.
\ No newline at end of file
diff --git a/server/src/model/user.ts b/server/src/model/user.ts
index 28f3e88..9504470 100644
--- a/server/src/model/user.ts
+++ b/server/src/model/user.ts
@@ -2,7 +2,6 @@ import { Table, Column, Model, DataType, Scopes, DefaultScope, DeletedAt, Belong
 
 @Table
 @DefaultScope(() => ({
-  //FIXME getting account still includes password
   attributes:{ exclude: ['password']}
 }))
 @Scopes(() => ({