    public function rules()
    {
        return [
            'name' => 'required',
            'email' => 'required|email',
            'address' => '',
            'primary_number' => 'numeric',
            'secondary_number' => 'numeric',
            'password' => 'sometimes',
            'password_confirmation' => 'sometimes',
            'image_path' => '',
            'departments' => 'required'
        ];
    }
The product does not require that users should have strong passwords, which makes it easier for attackers to compromise user accounts.