db/versions/11227-maroonEucalyptus/00-addWorkerTimeControlMailAcl.sql

@@ -0,0 +1,4 @@
+-- Place your SQL code here
+INSERT INTO salix.ACL (model, property, accessType, permission, principalType, principalId) 
+	VALUES ('WorkerTimeControlMail', 'count', 'READ', 'ALLOW', 'ROLE', 'employee'),
+		('Worker', '__get__mail', 'READ', 'ALLOW', 'ROLE', 'hr');

modules/worker/back/models/worker-time-control-mail.json

@@ -32,13 +32,5 @@
         "sendedCounter": {
             "type": "number"
         }
-    },
-    "acls": [
-      {
-        "accessType": "READ",
-        "principalType": "ROLE",
-        "principalId": "employee",
-        "permission": "ALLOW"
-      }
-    ]
+    }
 }

modules/worker/back/models/worker.json

@@ -130,6 +130,11 @@
             "type": "hasMany",
             "model": "TrainingCourse",
             "foreignKey": "workerFk"
+        },
+        "mail": {
+            "type": "hasMany",
+            "model": "WorkerTimeControlMail",
+            "foreignKey": "workerFk"
         }
     },
     "acls": [
@@ -139,6 +144,13 @@
             "permission": "ALLOW",
             "principalType": "ROLE",
             "principalId": "$owner"
+        },
+        {
+            "property": "__get__mail",
+            "accessType": "READ",
+            "permission": "ALLOW",
+            "principalType": "ROLE",
+            "principalId": "$owner"
         }
     ],
     "scopes": {