salix/db/changes/234601/00-claimViewerAcl.sql

INSERT INTO `account`.`role` (`name`, `description`, `hasLogin`)
	VALUES ('claimViewer','Trabajadores que consulta las reclamaciones ',1);

INSERT INTO `account`.`roleInherit` (`role`,`inheritsFrom`)
	SELECT `r`.`id`, `r2`.`id`
		FROM `account`.`role` `r`
			JOIN `account`.`role` `r2` ON `r2`.`name` = 'claimViewer'
		WHERE `r`.`name` IN (
			'salesPerson',
			'buyer',
			'deliveryBoss',
			'handmadeBoss'
		);

DELETE FROM `salix`.`ACL`
	WHERE `model`= 'claim'
		AND `property` IN (
			'filter',
			'find',
			'findById',
			'getSummary'
		);

INSERT INTO `salix`.`ACL` (`model`,`property`,`accessType`,`permission`,`principalType`,`principalId`)
	VALUES ('Claim','filter','READ','ALLOW','ROLE','claimViewer');
INSERT INTO `salix`.`ACL` (`model`,`property`,`accessType`,`permission`,`principalType`,`principalId`)
	VALUES ('Claim','find','READ','ALLOW','ROLE','claimViewer');
INSERT INTO `salix`.`ACL` (`model`,`property`,`accessType`,`permission`,`principalType`,`principalId`)
	VALUES ('Claim','findById','READ','ALLOW','ROLE','claimViewer');
INSERT INTO `salix`.`ACL` (`model`,`property`,`accessType`,`permission`,`principalType`,`principalId`)
	VALUES ('Claim','getSummary','READ','ALLOW','ROLE','claimViewer');