DELETE
    FROM `salix`.`ACL`
    WHERE model='Account' AND property='*' AND accessType='*';

INSERT INTO `salix`.`ACL` (model, property, accessType, permission, principalType, principalId)
    VALUES
        ('Account', '*', 'WRITE', 'ALLOW', 'ROLE', 'sysadmin'),
        ('Account', '*', 'READ', 'ALLOW', 'ROLE', 'employee'),
        ('Account', 'changeMailForwarding', 'WRITE', 'ALLOW', 'ROLE', 'employee');