departmentSchema.statics.getUserDepartments = function (userId, callback) {
  var self = this

  Teams.getTeamsOfUser(userId, function (err, teams) {
    if (err) return callback(err)

    return self
      .model(COLLECTION)
      .find({ teams: { $in: teams } })
      .exec(callback)
  })
}
The product does not require that users should have strong passwords, which makes it easier for attackers to compromise user accounts.