ALTER TABLE `vn`.`worker` ADD locker INT UNSIGNED NULL UNIQUE;
INSERT INTO `salix`.`ACL` (`model`, `property`, `accessType`, `permission`, `principalType`, `principalId`)
    VALUES
        ('DeviceProduction', '*', '*', 'ALLOW', 'ROLE', 'hr'),
        ('DeviceProductionModels', '*', '*', 'ALLOW', 'ROLE', 'hr'),
        ('DeviceProductionState', '*', '*', 'ALLOW', 'ROLE', 'hr'),
        ('DeviceProductionUser', '*', '*', 'ALLOW', 'ROLE', 'hr'),
        ('DeviceProduction', '*', '*', 'ALLOW', 'ROLE', 'productionAssi'),
        ('DeviceProductionModels', '*', '*', 'ALLOW', 'ROLE', 'productionAssi'),
        ('DeviceProductionState', '*', '*', 'ALLOW', 'ROLE', 'productionAssi'),
        ('DeviceProductionUser', '*', '*', 'ALLOW', 'ROLE', 'productionAssi'),
        ('Worker', 'deallocatePDA', '*', 'ALLOW', 'ROLE', 'hr'),
        ('Worker', 'allocatePDA', '*', 'ALLOW', 'ROLE', 'hr'),
        ('Worker', 'deallocatePDA', '*', 'ALLOW', 'ROLE', 'productionAssi'),
        ('Worker', 'allocatePDA', '*', 'ALLOW', 'ROLE', 'productionAssi');