salix/db/changes/10430-ash/00-aclAgency.sql

INSERT INTO salix.ACL (id, model, property, accessType, permission, principalType, principalId)
    VALUES(304, 'Agency', '*', '*', 'ALLOW', 'ROLE', 'employee');