diff --git a/db/changes/235001/00-timecontrol.sql b/db/changes/235001/00-timecontrol.sql
index ac7dc85d6..4e350b002 100644
--- a/db/changes/235001/00-timecontrol.sql
+++ b/db/changes/235001/00-timecontrol.sql
@@ -6,8 +6,8 @@ INSERT INTO `account`.`roleInherit` (role, inheritsFrom)
 
 INSERT INTO `salix`.`ACL` (model, property, accessType, permission, principalType, principalId)
     VALUES 
-        ('workerTimeControl', 'login', 'READ', 'ALLOW', 'ROLE', '*'),
-        ('workerTimeControl', 'getClockIn', 'READ', 'ALLOW', 'ROLE', '*'),
-        ('workerTimeControl', 'clockIn', 'WRITE', 'ALLOW', 'ROLE', '*');
+        ('WorkerTimeControl', 'login', 'READ', 'ALLOW', 'ROLE', 'timeControl'),
+        ('WorkerTimeControl', 'getClockIn', 'READ', 'ALLOW', 'ROLE', 'timeControl'),
+        ('WorkerTimeControl', 'clockIn', 'WRITE', 'ALLOW', 'ROLE', 'timeControl');
 
 CALL `account`.`role_sync`();