DELETE FROM salix.ACL WHERE model = 'MailAliasAccount' AND property = 'canEditAlias' AND principalType = 'ROLE' AND principalId = 'marketingBoss';