DELETE FROM `salix`.`ACL`
    WHERE
        model = 'MailForward'
        AND accessType = '*'
        AND property = '*'
        AND principalId = 'hr';


INSERT INTO `salix`.`ACL` (model, property, accessType, permission, principalType, principalId)
    VALUES
        ('VnUser', 'higherPrivileges', '*', 'ALLOW', 'ROLE', 'itManagement'),
        ('VnUser', 'mediumPrivileges', '*', 'ALLOW', 'ROLE', 'hr');