salix/db/changes/232201/00-aclRole.sql

DELETE FROM `salix`.`ACL` WHERE model = 'Role';
INSERT INTO `salix`.`ACL` (`model`, `property`, `accessType`, `permission`, `principalType`, `principalId`)
    VALUES
        ('Role', '*', 'READ', 'ALLOW', 'ROLE', 'employee');