refs #5468 restringido permisos 'WRITE' para sysadmin en VnUser

db/changes/231601/00-aclAccount.sql

@@ -4,3 +4,6 @@ DELETE
 
 INSERT INTO `salix`.`ACL` (model, property, accessType, permission, principalType, principalId)
     VALUES('Account', '*', 'WRITE', 'ALLOW', 'ROLE', 'sysadmin');
+
+INSERT INTO `salix`.`ACL` (model, property, accessType, permission, principalType, principalId)
+    VALUES('Account', '*', 'READ', 'ALLOW', 'ROLE', 'employee');

db/changes/231601/00-userAcl.sql

@@ -1,6 +1,7 @@
 INSERT INTO `salix`.`ACL` (model, property, accessType, permission, principalType, principalId)
     VALUES
-        ('VnUser', '*', '*', 'ALLOW', 'ROLE', 'employee'),
+        ('VnUser', '*', 'READ', 'ALLOW', 'ROLE', 'employee'),
+        ('VnUser', '*', 'WRITE', 'ALLOW', 'ROLE', 'sysadmin'),
         ('VnUser','acl','READ','ALLOW','ROLE','account'),
         ('VnUser','getCurrentUserData','READ','ALLOW','ROLE','account'),
         ('VnUser','changePassword', 'WRITE', 'ALLOW', 'ROLE', 'account'),

modules/account/front/descriptor/index.html

@@ -51,6 +51,7 @@
             ng-click="activateUser.show()"
             name="activateUser"
             vn-acl="sysadmin"
+            vn-acl-action="remove"
             translate>
             Activate user
         </vn-item>
@@ -59,6 +60,7 @@
             ng-click="deactivateUser.show()"
             name="deactivateUser"
             vn-acl="sysadmin"
+            vn-acl-action="remove"
             translate>
             Deactivate user
         </vn-item>