--- /dev/null
+# @tag: mail_journal_rights
+# @description: Extra right for email journal
+# @depends: master_rights_position_gaps
+# @locales: E-Mail-Journal
+# @locales: Read all employee e-mails
+
+package SL::DBUpgrade2::Auth::mail_journal_rights;
+
+use strict;
+use utf8;
+
+use parent qw(SL::DBUpgrade2::Base);
+
+use SL::DBUtils;
+
+sub run {
+ my ($self) = @_;
+
+ $self->db_query("INSERT INTO auth.master_rights (position, name, description) VALUES (?, ?, ?)", bind => $_) for
+ [ 4450, 'email_journal' , 'E-Mail-Journal' ],
+ [ 4480, 'email_employee_readall', 'Read all employee e-mails' ];
+
+ my $groups = $main::auth->read_groups();
+
+ foreach my $group (values %{$groups}) {
+ $group->{rights}->{email_journal} = $group->{rights}->{productivity};
+ $group->{rights}->{email_employee_readall} = $group->{rights}->{admin};
+ $main::auth->save_group($group);
+ }
+
+ return 1;
+} # end run
+
+1;