refs #5468 descriptor account solo lo puede ejecutar sysadmin y mail-forwarding solo el mismo o un superior

refs #4586

@@ -12,1 +12,4 @@
     require('../methods/vn-user/privileges')(Self);
+    require('../methods/vn-user/createUser')(Self);
+
+    Self.definition.settings.acls.find(acl => acl.property == 'create').permission = 'DENY';

@@ -125,0 +124,4 @@
+	],
+    "scopes": {
+        "preview": {
+            "fields": ["id", "name", "username", "roleFk", "nickname", "lang", "active", "created", "updated", "image", "hasGrant", "realm", "email"]

@@ -0,0 +3,4 @@
+    VALUES
+        ('Role', '*', 'READ', 'ALLOW', 'ROLE', 'employee'),
+        ('Role', '*', 'WRITE', 'ALLOW', 'ROLE', 'hr'),
+        ('Role', '*', 'WRITE', 'ALLOW', 'ROLE', 'marketing');

@@ -0,0 +20,4 @@
+    Self.deleteMailAlias = async function(ctx, id) {
+        const models = Self.app.models;
+
+        const isAuthorized = await models.Worker.isAuthorized(ctx, id);

@@ -9,1 +9,4 @@
     require('../methods/account/set-password')(Self);
+    require('../methods/account/change-mail-forwarding')(Self);
+    require('../methods/account/add-mail-alias')(Self);
+    require('../methods/account/delete-mail-alias')(Self);

@@ -5,0 +14,4 @@
+    get isHr() {
+        return this.aclService.hasAny(['hr']);
+    }
+}

@@ -99,2 +95,3 @@
-            if (res.data)
+            if (res.data) {
                 this.businessId = res.data.businessFk;
+                console.log(this.businessId);