allow to read user model by everyone and restrict update/delete model by authenticated user only
allow to read user model by everyone and restrict update/delete model by authenticated user only

twhtanghk/OAuth2,twhtanghk/OAuth2,twhtanghk/OAuth2