salix/db/changes/232201/00-aclVnUser.sql

DELETE
	FROM `salix`.`ACL`
	WHERE model = 'VnUser' AND property = '*' AND principalId = 'employee';

INSERT INTO `salix`.`ACL` (model, property, accessType, permission, principalType, principalId)
    VALUES
        ('VnUser', '*', '*', 'ALLOW', 'ROLE', 'itManagement'),
        ('VnUser', '__get__preview', 'READ', 'ALLOW', 'ROLE', 'employee'),
        ('VnUser', 'preview', '*', 'ALLOW', 'ROLE', 'employee'),
        ('VnUser', 'createUser', 'WRITE', 'ALLOW', 'ROLE', 'itManagement');