diff --git a/back/models/module.json b/back/models/module.json
index 0f5074157..c66649b2e 100644
--- a/back/models/module.json
+++ b/back/models/module.json
@@ -11,5 +11,13 @@
 			"type": "string",
 			"id": true
 		}
-	}
+	},
+	"acls": [
+		{
+			"accessType": "READ",
+			"principalType": "ROLE",
+			"principalId": "$everyone",
+			"permission": "ALLOW"
+		}
+	]
 }
diff --git a/back/models/starred-module.json b/back/models/starred-module.json
index d3942ffd5..c819e57b3 100644
--- a/back/models/starred-module.json
+++ b/back/models/starred-module.json
@@ -31,5 +31,13 @@
             "model": "Module",
             "foreignKey": "moduleFk"
         }
-    }
+    },
+	"acls": [
+		{
+			"accessType": "READ",
+			"principalType": "ROLE",
+			"principalId": "$everyone",
+			"permission": "ALLOW"
+		}
+	]
 }
diff --git a/db/changes/10290-invoiceIn/00-ACL.sql b/db/changes/10290-invoiceIn/00-ACL.sql
new file mode 100644
index 000000000..d1f940c6d
--- /dev/null
+++ b/db/changes/10290-invoiceIn/00-ACL.sql
@@ -0,0 +1,4 @@
+INSERT INTO `salix`.`ACL` (`model`, `property`, `accessType`, `permission`, `principalType`, `principalId`) 
+    VALUES 
+        ('module', '*', '*', 'ALLOW', 'ROLE', 'employee'),
+        ('starredModule', '*', '*', 'ALLOW', 'ROLE', 'employee');
diff --git a/db/changes/10281-valentineDay/00-module.sql b/db/changes/10290-invoiceIn/00-module.sql
similarity index 100%
rename from db/changes/10281-valentineDay/00-module.sql
rename to db/changes/10290-invoiceIn/00-module.sql
diff --git a/db/changes/10281-valentineDay/01-starredModule.sql b/db/changes/10290-invoiceIn/01-starredModule.sql
similarity index 100%
rename from db/changes/10281-valentineDay/01-starredModule.sql
rename to db/changes/10290-invoiceIn/01-starredModule.sql