salix/db/changes/232201/00-aclAccount.sql

10 lines
411 B
SQL

DELETE
FROM `salix`.`ACL`
WHERE model='Account' AND property='*' AND accessType='*';
INSERT INTO `salix`.`ACL` (model, property, accessType, permission, principalType, principalId)
VALUES
('Account', '*', 'WRITE', 'ALLOW', 'ROLE', 'sysadmin'),
('Account', '*', 'READ', 'ALLOW', 'ROLE', 'employee'),
('Account', 'changeMailForwarding', 'WRITE', 'ALLOW', 'ROLE', 'employee');