CSPACE-1300

CSPACE-1930
The delete on permrole sub resource of authorization/permissions and authorization/roles services now requires a POST with parameter _method=delete (/authorization/roles/{rolecsid}/permroles?_method=delete) and entity body (like POST for create). The delete only deletes the relationships found in the entity body.
test: all service tests, permissionrole, rolepermission, authorization and multi tenancy tests

M    services/authorization-mgt/service/src/main/java/org/collectionspace/services/authorization/PermissionResource.java
M    services/authorization-mgt/service/src/main/java/org/collectionspace/services/authorization/storage/PermissionRoleDocumentHandler.java
M    services/authorization-mgt/service/src/main/java/org/collectionspace/services/authorization/storage/AuthorizationDelegate.java
M    services/authorization-mgt/service/src/main/java/org/collectionspace/services/authorization/RoleResource.java
M    services/authorization-mgt/service/src/main/java/org/collectionspace/services/authorization/PermissionRoleSubResource.java
M    services/authorization-mgt/import/src/main/resources/import-data/import-permissions.xml
M    services/authorization-mgt/import/src/main/resources/import-data/import-permissions-roles.xml
M    services/authorization-mgt/import/src/main/resources/import-data/import-roles.xml
M    services/authorization-mgt/client/src/test/java/org/collectionspace/services/authorization/client/test/PermissionRoleServiceTest.java
M    services/authorization-mgt/client/src/test/java/org/collectionspace/services/authorization/client/test/RolePermissionServiceTest.java
M    services/authorization-mgt/client/src/main/java/org/collectionspace/services/client/PermissionRoleClient.java
M    services/authorization-mgt/client/src/main/java/org/collectionspace/services/client/RolePermissionClient.java
M    services/authorization-mgt/client/src/main/java/org/collectionspace/services/client/PermissionRoleProxy.java
M    services/authorization-mgt/client/src/main/java/org/collectionspace/services/client/RolePermissionProxy.java
M    services/common/src/main/java/org/collectionspace/services/common/storage/jpa/JpaRelationshipStorageClient.java
M    services/common/src/main/java/org/collectionspace/services/common/security/SecurityInterceptor.java
M    services/security/client/src/test/java/org/collectionspace/services/security/client/test/AuthorizationServiceTest.java
M    services/security/client/src/test/java/org/collectionspace/services/security/client/test/MultiTenancyTest.java

diff --git a/services/authorization-mgt/client/src/main/java/org/collectionspace/services/client/PermissionRoleClient.java b/services/authorization-mgt/client/src/main/java/org/collectionspace/services/client/PermissionRoleClient.java
index f323ad90eeeda797b5c3f9ea372d3f884bf23e6a..b6e2971465af70a0e363e87e02e8b0fcb4f27eb1 100644 (file)
--- a/services/authorization-mgt/client/src/main/java/org/collectionspace/services/client/PermissionRoleClient.java
+++ b/services/authorization-mgt/client/src/main/java/org/collectionspace/services/client/PermissionRoleClient.java
@@ -68,8 +68,8 @@ public class PermissionRoleClient extends AbstractServiceClientImpl {
      */
     @Override
     public CollectionSpaceProxy getProxy() {
-       return this.permissionRoleProxy;
-    }    
+        return this.permissionRoleProxy;
+    }
 
     /**
      * allow to reset proxy as per security needs.
@@ -84,7 +84,6 @@ public class PermissionRoleClient extends AbstractServiceClientImpl {
         }
     }
 
-
     /**
      * Read.
      *
@@ -109,16 +108,16 @@ public class PermissionRoleClient extends AbstractServiceClientImpl {
         return permissionRoleProxy.create(csid, permRole);
     }
 
+
     /**
-     * Delete.
+     * Delete given relationships between given permission and role(s)
      *
      * @param csid the csid
-     * @param prcsid relationship does not have an id, junk is fine
+     * @param relationships to delete
      * @return response
      * @see
      */
-    public ClientResponse<Response> delete(String csid, String prcsid) {
-        return permissionRoleProxy.delete(csid, prcsid);
+    public ClientResponse<Response> delete(String csid, PermissionRole permRole) {
+        return permissionRoleProxy.delete(csid, "delete", permRole);
     }
-        
 }

diff --git a/services/authorization-mgt/client/src/main/java/org/collectionspace/services/client/PermissionRoleProxy.java b/services/authorization-mgt/client/src/main/java/org/collectionspace/services/client/PermissionRoleProxy.java
index 45d389c9bfa2535c19584ea91f2ef52084670aa6..e3f2b9ad00270d166fe3f21e2c619594007379f8 100644 (file)
--- a/services/authorization-mgt/client/src/main/java/org/collectionspace/services/client/PermissionRoleProxy.java
+++ b/services/authorization-mgt/client/src/main/java/org/collectionspace/services/client/PermissionRoleProxy.java
@@ -27,12 +27,12 @@
 package org.collectionspace.services.client;
 
 import javax.ws.rs.Consumes;
-import javax.ws.rs.DELETE;
 import javax.ws.rs.GET;
 import javax.ws.rs.POST;
 import javax.ws.rs.Path;
 import javax.ws.rs.PathParam;
 import javax.ws.rs.Produces;
+import javax.ws.rs.QueryParam;
 import javax.ws.rs.core.Response;
 
 
@@ -58,9 +58,10 @@ public interface PermissionRoleProxy extends CollectionSpaceProxy {
     ClientResponse<PermissionRole> read(@PathParam("csid") String csid,
             @PathParam("prcsid") String prcsid);
 
-    //(D)elete
-    @DELETE
-    @Path("/{csid}/permroles/{prcsid}")
+
+    @POST
+    @Path("/{csid}/permroles")
     ClientResponse<Response> delete(@PathParam("csid") String csid,
-            @PathParam("prcsid") String prcsid);
+            @QueryParam("_method") String method,
+            PermissionRole permRole);
 }

diff --git a/services/authorization-mgt/client/src/main/java/org/collectionspace/services/client/RolePermissionClient.java b/services/authorization-mgt/client/src/main/java/org/collectionspace/services/client/RolePermissionClient.java
index 8ab11d10a52af38783a0fd91c58d5cdb3178c0ce..4077ce8a73817203c1226002dfdc22ec6cd58079 100644 (file)
--- a/services/authorization-mgt/client/src/main/java/org/collectionspace/services/client/RolePermissionClient.java
+++ b/services/authorization-mgt/client/src/main/java/org/collectionspace/services/client/RolePermissionClient.java
@@ -68,8 +68,8 @@ public class RolePermissionClient extends AbstractServiceClientImpl {
      */
     @Override
     public CollectionSpaceProxy getProxy() {
-       return this.rolePermissionProxy;
-    }    
+        return this.rolePermissionProxy;
+    }
 
     /**
      * allow to reset proxy as per security needs.
@@ -84,7 +84,6 @@ public class RolePermissionClient extends AbstractServiceClientImpl {
         }
     }
 
-
     /**
      * Read.
      *
@@ -98,7 +97,7 @@ public class RolePermissionClient extends AbstractServiceClientImpl {
     }
 
     /**
-     * Creates the.
+     * Creates the relationships.
      *
      * @param csid the csid
      * @param permRole the perm role
@@ -110,15 +109,12 @@ public class RolePermissionClient extends AbstractServiceClientImpl {
     }
 
     /**
-     * Delete.
-     *
-     * @param csid the csid
-     * @param prcsid relationship does not have an id, junk is fine
-     * @return response
-     * @see
+     * delete given relationships between given role and permission(s)
+     * @param csid
+     * @param permRole
+     * @return
      */
-    public ClientResponse<Response> delete(String csid, String prcsid) {
-        return rolePermissionProxy.delete(csid, prcsid);
+    public ClientResponse<Response> delete(String csid, PermissionRole permRole) {
+        return rolePermissionProxy.delete(csid, "delete", permRole);
     }
-        
 }

diff --git a/services/authorization-mgt/client/src/main/java/org/collectionspace/services/client/RolePermissionProxy.java b/services/authorization-mgt/client/src/main/java/org/collectionspace/services/client/RolePermissionProxy.java
index 6dc9ac43b91bc24eba90cdbcc7875c9db2f4c424..3613ba4c29e60b2a060c40ea15809101e547a99c 100644 (file)
--- a/services/authorization-mgt/client/src/main/java/org/collectionspace/services/client/RolePermissionProxy.java
+++ b/services/authorization-mgt/client/src/main/java/org/collectionspace/services/client/RolePermissionProxy.java
@@ -33,6 +33,7 @@ import javax.ws.rs.POST;
 import javax.ws.rs.Path;
 import javax.ws.rs.PathParam;
 import javax.ws.rs.Produces;
+import javax.ws.rs.QueryParam;
 import javax.ws.rs.core.Response;
 
 
@@ -58,9 +59,9 @@ public interface RolePermissionProxy extends CollectionSpaceProxy {
     ClientResponse<PermissionRole> read(@PathParam("csid") String csid,
             @PathParam("prcsid") String prcsid);
 
-    //(D)elete
-    @DELETE
-    @Path("/{csid}/permroles/{prcsid}")
-    ClientResponse<Response> delete(@PathParam("csid") String csid,
-            @PathParam("prcsid") String prcsid);
+
+    @POST
+    @Path("/{csid}/permroles")
+    ClientResponse<Response> delete(@PathParam("csid") String csid, 
+            @QueryParam("_method") String method, PermissionRole permRole);
 }

diff --git a/services/authorization-mgt/client/src/test/java/org/collectionspace/services/authorization/client/test/PermissionRoleServiceTest.java b/services/authorization-mgt/client/src/test/java/org/collectionspace/services/authorization/client/test/PermissionRoleServiceTest.java
index 41fc32752c15c885b930b3c84d9325137c9f54a2..82be06e7d88a8cfd2de6ac2153412c7fc87a1314 100644 (file)
--- a/services/authorization-mgt/client/src/test/java/org/collectionspace/services/authorization/client/test/PermissionRoleServiceTest.java
+++ b/services/authorization-mgt/client/src/test/java/org/collectionspace/services/authorization/client/test/PermissionRoleServiceTest.java
@@ -459,8 +459,10 @@ public class PermissionRoleServiceTest extends AbstractServiceTestImpl {
         PermissionRoleClient client = new PermissionRoleClient();
         ClientResponse<Response> res = null;
         try {
-            res = client.delete(
-                    permValues.get(TEST_SERVICE_NAME + TEST_MARKER).getPermissionId(), "123");
+            PermissionValue pv = permValues.get(TEST_SERVICE_NAME + TEST_MARKER);
+        PermissionRole permRole = createPermissionRoleInstance(pv,
+                roleValues.values(), true, true);
+            res = client.delete(pv.getPermissionId(), permRole);
             int statusCode = res.getStatus();
 
             // Check the status code of the response: does it match
@@ -564,24 +566,6 @@ public class PermissionRoleServiceTest extends AbstractServiceTestImpl {
             logger.debug("Cleaning up temporary resources created for testing ...");
         }
 
-        PermissionRoleClient client = new PermissionRoleClient();
-        for (String resourceId : allResourceIdsCreated) {
-
-            ClientResponse<Response> res = client.delete(resourceId, "123");
-            int statusCode = res.getStatus();
-            try {
-                if (logger.isDebugEnabled()) {
-                    logger.debug("cleanup: delete relationships for permission id="
-                            + resourceId + " status=" + statusCode);
-                }
-                Assert.assertTrue(REQUEST_TYPE.isValidStatusCode(statusCode),
-                        invalidStatusCodeMessage(REQUEST_TYPE, statusCode));
-                Assert.assertEquals(statusCode, EXPECTED_STATUS_CODE);
-            } finally {
-                res.releaseConnection();
-            }
-        }
-
         for (PermissionValue pv : permValues.values()) {
             deletePermission(pv.getPermissionId());
         }

diff --git a/services/authorization-mgt/client/src/test/java/org/collectionspace/services/authorization/client/test/RolePermissionServiceTest.java b/services/authorization-mgt/client/src/test/java/org/collectionspace/services/authorization/client/test/RolePermissionServiceTest.java
index bb33ec820b464d635eedde4611eced412814bf89..2df8503620b7bf2be271e16f2ecc69467c6a9ba8 100644 (file)
--- a/services/authorization-mgt/client/src/test/java/org/collectionspace/services/authorization/client/test/RolePermissionServiceTest.java
+++ b/services/authorization-mgt/client/src/test/java/org/collectionspace/services/authorization/client/test/RolePermissionServiceTest.java
@@ -187,9 +187,7 @@ public class RolePermissionServiceTest extends AbstractServiceTestImpl {
         ClientResponse<Response> res = null;
         try {
             res = client.create(rv.getRoleId(), permRole);
-
             int statusCode = res.getStatus();
-
             if (logger.isDebugEnabled()) {
                 logger.debug(testName + ": status = " + statusCode);
             }
@@ -358,7 +356,7 @@ public class RolePermissionServiceTest extends AbstractServiceTestImpl {
             PermissionRole output = (PermissionRole) res.getEntity();
 
             String sOutput = objectAsXmlString(output, PermissionRole.class);
-            if(logger.isDebugEnabled()) {
+            if (logger.isDebugEnabled()) {
                 logger.debug(testName + " received " + sOutput);
             }
         } finally {
@@ -458,8 +456,11 @@ public class RolePermissionServiceTest extends AbstractServiceTestImpl {
         RolePermissionClient client = new RolePermissionClient();
         ClientResponse<Response> res = null;
         try {
+            RoleValue rv = roleValues.get(getRoleName());
+            PermissionRole permRole = createPermissionRoleInstance(rv,
+                    permValues.values(), true, true);
             res = client.delete(
-                    roleValues.get(getRoleName()).getRoleId(), "123");
+                    roleValues.get(getRoleName()).getRoleId(), permRole);
             int statusCode = res.getStatus();
 
             // Check the status code of the response: does it match
@@ -538,7 +539,8 @@ public class RolePermissionServiceTest extends AbstractServiceTestImpl {
         PermissionRole permRole = PermissionRoleFactory.createPermissionRoleInstance(
                 rv, pvls, usePermId, useRoleId);
         if (logger.isDebugEnabled()) {
-            logger.debug("to be created, permRole");
+            logger.debug("" +
+                    "permRole");
             logger.debug(objectAsXmlString(permRole, PermissionRole.class));
         }
         return permRole;
@@ -561,25 +563,6 @@ public class RolePermissionServiceTest extends AbstractServiceTestImpl {
         if (logger.isDebugEnabled()) {
             logger.debug("Cleaning up temporary resources created for testing ...");
         }
-
-        RolePermissionClient client = new RolePermissionClient();
-        for (String resourceId : allResourceIdsCreated) {
-
-            ClientResponse<Response> res = client.delete(resourceId, "123");
-            int statusCode = res.getStatus();
-            try {
-                if (logger.isDebugEnabled()) {
-                    logger.debug("cleanup: delete relationships for permission id="
-                            + resourceId + " status=" + statusCode);
-                }
-                Assert.assertTrue(REQUEST_TYPE.isValidStatusCode(statusCode),
-                        invalidStatusCodeMessage(REQUEST_TYPE, statusCode));
-                Assert.assertEquals(statusCode, EXPECTED_STATUS_CODE);
-            } finally {
-                res.releaseConnection();
-            }
-        }
-
         for (PermissionValue pv : permValues.values()) {
             deletePermission(pv.getPermissionId());
         }

diff --git a/services/authorization-mgt/import/src/main/resources/import-data/import-permissions-roles.xml b/services/authorization-mgt/import/src/main/resources/import-data/import-permissions-roles.xml
index 197e83452ba509212220f44529681928ecc9ac49..931f7208c298e96bac48f331ee65ce8bc24467c5 100644 (file)
--- a/services/authorization-mgt/import/src/main/resources/import-data/import-permissions-roles.xml
+++ b/services/authorization-mgt/import/src/main/resources/import-data/import-permissions-roles.xml
@@ -3,22 +3,22 @@
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>d33b48cf-e819-4e60-ab2e-ba3f3d051f07</permissionId>
+            <permissionId>7a3779f9-6fd0-4c90-865e-9855fc503340</permissionId>
             <resourceName>idgenerators</resourceName>
         </permission>
         <role>
-            <roleId>b6af2c74-4238-44e1-b7c5-12b9a262a39e</roleId>
+            <roleId>45c752ca-75aa-4801-a65e-5b85119e4dde</roleId>
             <roleName>ROLE_TENANT_ADMINISTRATOR</roleName>
         </role>
         <role>
-            <roleId>9e848daa-2b35-444a-871b-95c9b998ed76</roleId>
+            <roleId>b5c798e6-3c1c-4c86-b9e0-40a5717bb084</roleId>
             <roleName>ROLE_TENANT_ADMINISTRATOR</roleName>
         </role>
     </permissionRole>
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>d33b48cf-e819-4e60-ab2e-ba3f3d051f07</permissionId>
+            <permissionId>7a3779f9-6fd0-4c90-865e-9855fc503340</permissionId>
             <resourceName>idgenerators</resourceName>
         </permission>
         <role>
@@ -29,22 +29,22 @@
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>4b433f0a-32cb-4baf-9fcf-dc85e73eb282</permissionId>
+            <permissionId>2a32873d-7e34-44a3-874c-6ae59b97210b</permissionId>
             <resourceName>id</resourceName>
         </permission>
         <role>
-            <roleId>b6af2c74-4238-44e1-b7c5-12b9a262a39e</roleId>
+            <roleId>45c752ca-75aa-4801-a65e-5b85119e4dde</roleId>
             <roleName>ROLE_TENANT_ADMINISTRATOR</roleName>
         </role>
         <role>
-            <roleId>9e848daa-2b35-444a-871b-95c9b998ed76</roleId>
+            <roleId>b5c798e6-3c1c-4c86-b9e0-40a5717bb084</roleId>
             <roleName>ROLE_TENANT_ADMINISTRATOR</roleName>
         </role>
     </permissionRole>
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>4b433f0a-32cb-4baf-9fcf-dc85e73eb282</permissionId>
+            <permissionId>2a32873d-7e34-44a3-874c-6ae59b97210b</permissionId>
             <resourceName>id</resourceName>
         </permission>
         <role>
@@ -55,24 +55,24 @@
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>e6b24556-774d-4ab5-936d-f20c81686055</permissionId>
+            <permissionId>8c7caa28-4ccc-44aa-b925-49406f1ab8db</permissionId>
             <resourceName>
                 /idgenerators/*/ids
             </resourceName>
         </permission>
         <role>
-            <roleId>b6af2c74-4238-44e1-b7c5-12b9a262a39e</roleId>
+            <roleId>45c752ca-75aa-4801-a65e-5b85119e4dde</roleId>
             <roleName>ROLE_TENANT_ADMINISTRATOR</roleName>
         </role>
         <role>
-            <roleId>9e848daa-2b35-444a-871b-95c9b998ed76</roleId>
+            <roleId>b5c798e6-3c1c-4c86-b9e0-40a5717bb084</roleId>
             <roleName>ROLE_TENANT_ADMINISTRATOR</roleName>
         </role>
     </permissionRole>
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>e6b24556-774d-4ab5-936d-f20c81686055</permissionId>
+            <permissionId>8c7caa28-4ccc-44aa-b925-49406f1ab8db</permissionId>
             <resourceName>
                 /idgenerators/*/ids
             </resourceName>
@@ -85,22 +85,22 @@
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>c1d5f82c-fbc2-452e-a816-a8a4af1ff187</permissionId>
+            <permissionId>45e6183c-dbd4-4922-a434-607fb5033e5a</permissionId>
             <resourceName>collectionobjects</resourceName>
         </permission>
         <role>
-            <roleId>b6af2c74-4238-44e1-b7c5-12b9a262a39e</roleId>
+            <roleId>45c752ca-75aa-4801-a65e-5b85119e4dde</roleId>
             <roleName>ROLE_TENANT_ADMINISTRATOR</roleName>
         </role>
         <role>
-            <roleId>9e848daa-2b35-444a-871b-95c9b998ed76</roleId>
+            <roleId>b5c798e6-3c1c-4c86-b9e0-40a5717bb084</roleId>
             <roleName>ROLE_TENANT_ADMINISTRATOR</roleName>
         </role>
     </permissionRole>
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>c1d5f82c-fbc2-452e-a816-a8a4af1ff187</permissionId>
+            <permissionId>45e6183c-dbd4-4922-a434-607fb5033e5a</permissionId>
             <resourceName>collectionobjects</resourceName>
         </permission>
         <role>
@@ -111,24 +111,24 @@
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>de3b57c2-7a69-4f3e-aeb5-c99b6ab96215</permissionId>
+            <permissionId>22d1bf2c-28b8-4cad-81b2-d579d205ae83</permissionId>
             <resourceName>
                 /collectionobjects/*/authorityrefs/
             </resourceName>
         </permission>
         <role>
-            <roleId>b6af2c74-4238-44e1-b7c5-12b9a262a39e</roleId>
+            <roleId>45c752ca-75aa-4801-a65e-5b85119e4dde</roleId>
             <roleName>ROLE_TENANT_ADMINISTRATOR</roleName>
         </role>
         <role>
-            <roleId>9e848daa-2b35-444a-871b-95c9b998ed76</roleId>
+            <roleId>b5c798e6-3c1c-4c86-b9e0-40a5717bb084</roleId>
             <roleName>ROLE_TENANT_ADMINISTRATOR</roleName>
         </role>
     </permissionRole>
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>de3b57c2-7a69-4f3e-aeb5-c99b6ab96215</permissionId>
+            <permissionId>22d1bf2c-28b8-4cad-81b2-d579d205ae83</permissionId>
             <resourceName>
                 /collectionobjects/*/authorityrefs/
             </resourceName>
@@ -141,22 +141,22 @@
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>29b4c628-f114-40fe-863e-763e6beb00db</permissionId>
+            <permissionId>993254e1-52cc-45b2-839a-3280c41ebb75</permissionId>
             <resourceName>intakes</resourceName>
         </permission>
         <role>
-            <roleId>b6af2c74-4238-44e1-b7c5-12b9a262a39e</roleId>
+            <roleId>45c752ca-75aa-4801-a65e-5b85119e4dde</roleId>
             <roleName>ROLE_TENANT_ADMINISTRATOR</roleName>
         </role>
         <role>
-            <roleId>9e848daa-2b35-444a-871b-95c9b998ed76</roleId>
+            <roleId>b5c798e6-3c1c-4c86-b9e0-40a5717bb084</roleId>
             <roleName>ROLE_TENANT_ADMINISTRATOR</roleName>
         </role>
     </permissionRole>
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>29b4c628-f114-40fe-863e-763e6beb00db</permissionId>
+            <permissionId>993254e1-52cc-45b2-839a-3280c41ebb75</permissionId>
             <resourceName>intakes</resourceName>
         </permission>
         <role>
@@ -167,24 +167,24 @@
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>bd86eeeb-9ed8-48f6-a5c9-ab82d4689548</permissionId>
+            <permissionId>c246574f-7e7d-4a3d-90a3-488a1f13440c</permissionId>
             <resourceName>
                 /intakes/*/authorityrefs/
             </resourceName>
         </permission>
         <role>
-            <roleId>b6af2c74-4238-44e1-b7c5-12b9a262a39e</roleId>
+            <roleId>45c752ca-75aa-4801-a65e-5b85119e4dde</roleId>
             <roleName>ROLE_TENANT_ADMINISTRATOR</roleName>
         </role>
         <role>
-            <roleId>9e848daa-2b35-444a-871b-95c9b998ed76</roleId>
+            <roleId>b5c798e6-3c1c-4c86-b9e0-40a5717bb084</roleId>
             <roleName>ROLE_TENANT_ADMINISTRATOR</roleName>
         </role>
     </permissionRole>
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>bd86eeeb-9ed8-48f6-a5c9-ab82d4689548</permissionId>
+            <permissionId>c246574f-7e7d-4a3d-90a3-488a1f13440c</permissionId>
             <resourceName>
                 /intakes/*/authorityrefs/
             </resourceName>
@@ -197,22 +197,22 @@
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>a11a3a8e-311e-43e0-b91f-1bb315614469</permissionId>
+            <permissionId>12793f24-a04e-4b73-98f1-975d0877b481</permissionId>
             <resourceName>loansin</resourceName>
         </permission>
         <role>
-            <roleId>b6af2c74-4238-44e1-b7c5-12b9a262a39e</roleId>
+            <roleId>45c752ca-75aa-4801-a65e-5b85119e4dde</roleId>
             <roleName>ROLE_TENANT_ADMINISTRATOR</roleName>
         </role>
         <role>
-            <roleId>9e848daa-2b35-444a-871b-95c9b998ed76</roleId>
+            <roleId>b5c798e6-3c1c-4c86-b9e0-40a5717bb084</roleId>
             <roleName>ROLE_TENANT_ADMINISTRATOR</roleName>
         </role>
     </permissionRole>
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>a11a3a8e-311e-43e0-b91f-1bb315614469</permissionId>
+            <permissionId>12793f24-a04e-4b73-98f1-975d0877b481</permissionId>
             <resourceName>loansin</resourceName>
         </permission>
         <role>
@@ -223,24 +223,24 @@
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>9b89bd44-4611-400e-b6e4-b66437d1fd4c</permissionId>
+            <permissionId>ec067cf5-ef69-4118-9557-1080659ebab8</permissionId>
             <resourceName>
                 /loansin/*/authorityrefs/
             </resourceName>
         </permission>
         <role>
-            <roleId>b6af2c74-4238-44e1-b7c5-12b9a262a39e</roleId>
+            <roleId>45c752ca-75aa-4801-a65e-5b85119e4dde</roleId>
             <roleName>ROLE_TENANT_ADMINISTRATOR</roleName>
         </role>
         <role>
-            <roleId>9e848daa-2b35-444a-871b-95c9b998ed76</roleId>
+            <roleId>b5c798e6-3c1c-4c86-b9e0-40a5717bb084</roleId>
             <roleName>ROLE_TENANT_ADMINISTRATOR</roleName>
         </role>
     </permissionRole>
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>9b89bd44-4611-400e-b6e4-b66437d1fd4c</permissionId>
+            <permissionId>ec067cf5-ef69-4118-9557-1080659ebab8</permissionId>
             <resourceName>
                 /loansin/*/authorityrefs/
             </resourceName>
@@ -253,22 +253,22 @@
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>9b182e51-fd72-4daf-af69-c8047be84b8b</permissionId>
+            <permissionId>0b84bbc3-8ca2-4566-8f16-2a827e68934c</permissionId>
             <resourceName>loansout</resourceName>
         </permission>
         <role>
-            <roleId>b6af2c74-4238-44e1-b7c5-12b9a262a39e</roleId>
+            <roleId>45c752ca-75aa-4801-a65e-5b85119e4dde</roleId>
             <roleName>ROLE_TENANT_ADMINISTRATOR</roleName>
         </role>
         <role>
-            <roleId>9e848daa-2b35-444a-871b-95c9b998ed76</roleId>
+            <roleId>b5c798e6-3c1c-4c86-b9e0-40a5717bb084</roleId>
             <roleName>ROLE_TENANT_ADMINISTRATOR</roleName>
         </role>
     </permissionRole>
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>9b182e51-fd72-4daf-af69-c8047be84b8b</permissionId>
+            <permissionId>0b84bbc3-8ca2-4566-8f16-2a827e68934c</permissionId>
             <resourceName>loansout</resourceName>
         </permission>
         <role>
@@ -279,24 +279,24 @@
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>ac8a3d77-709b-4120-8e2c-26d375ccb673</permissionId>
+            <permissionId>be0632f2-4185-4447-b525-fdbfcf8a74cf</permissionId>
             <resourceName>
                 /loansout/*/authorityrefs/
             </resourceName>
         </permission>
         <role>
-            <roleId>b6af2c74-4238-44e1-b7c5-12b9a262a39e</roleId>
+            <roleId>45c752ca-75aa-4801-a65e-5b85119e4dde</roleId>
             <roleName>ROLE_TENANT_ADMINISTRATOR</roleName>
         </role>
         <role>
-            <roleId>9e848daa-2b35-444a-871b-95c9b998ed76</roleId>
+            <roleId>b5c798e6-3c1c-4c86-b9e0-40a5717bb084</roleId>
             <roleName>ROLE_TENANT_ADMINISTRATOR</roleName>
         </role>
     </permissionRole>
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>ac8a3d77-709b-4120-8e2c-26d375ccb673</permissionId>
+            <permissionId>be0632f2-4185-4447-b525-fdbfcf8a74cf</permissionId>
             <resourceName>
                 /loansout/*/authorityrefs/
             </resourceName>
@@ -309,22 +309,22 @@
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>f6797f43-74c1-4dd5-957b-96b264509e0a</permissionId>
+            <permissionId>4489fe0b-3859-40b2-a1c2-77d6527aed53</permissionId>
             <resourceName>movements</resourceName>
         </permission>
         <role>
-            <roleId>b6af2c74-4238-44e1-b7c5-12b9a262a39e</roleId>
+            <roleId>45c752ca-75aa-4801-a65e-5b85119e4dde</roleId>
             <roleName>ROLE_TENANT_ADMINISTRATOR</roleName>
         </role>
         <role>
-            <roleId>9e848daa-2b35-444a-871b-95c9b998ed76</roleId>
+            <roleId>b5c798e6-3c1c-4c86-b9e0-40a5717bb084</roleId>
             <roleName>ROLE_TENANT_ADMINISTRATOR</roleName>
         </role>
     </permissionRole>
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>f6797f43-74c1-4dd5-957b-96b264509e0a</permissionId>
+            <permissionId>4489fe0b-3859-40b2-a1c2-77d6527aed53</permissionId>
             <resourceName>movements</resourceName>
         </permission>
         <role>
@@ -335,24 +335,24 @@
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>f016c28a-afc1-4fda-bd18-8ca532f94b9c</permissionId>
+            <permissionId>23eb0343-3a0c-4047-988e-74e626a8b11a</permissionId>
             <resourceName>
                 /movements/*/authorityrefs/
             </resourceName>
         </permission>
         <role>
-            <roleId>b6af2c74-4238-44e1-b7c5-12b9a262a39e</roleId>
+            <roleId>45c752ca-75aa-4801-a65e-5b85119e4dde</roleId>
             <roleName>ROLE_TENANT_ADMINISTRATOR</roleName>
         </role>
         <role>
-            <roleId>9e848daa-2b35-444a-871b-95c9b998ed76</roleId>
+            <roleId>b5c798e6-3c1c-4c86-b9e0-40a5717bb084</roleId>
             <roleName>ROLE_TENANT_ADMINISTRATOR</roleName>
         </role>
     </permissionRole>
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>f016c28a-afc1-4fda-bd18-8ca532f94b9c</permissionId>
+            <permissionId>23eb0343-3a0c-4047-988e-74e626a8b11a</permissionId>
             <resourceName>
                 /movements/*/authorityrefs/
             </resourceName>
@@ -365,22 +365,22 @@
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>d21d72d8-a9f9-40dd-a14d-7463bef3e457</permissionId>
+            <permissionId>b4355e36-3fec-4759-b88e-96595a1182e2</permissionId>
             <resourceName>vocabularies</resourceName>
         </permission>
         <role>
-            <roleId>b6af2c74-4238-44e1-b7c5-12b9a262a39e</roleId>
+            <roleId>45c752ca-75aa-4801-a65e-5b85119e4dde</roleId>
             <roleName>ROLE_TENANT_ADMINISTRATOR</roleName>
         </role>
         <role>
-            <roleId>9e848daa-2b35-444a-871b-95c9b998ed76</roleId>
+            <roleId>b5c798e6-3c1c-4c86-b9e0-40a5717bb084</roleId>
             <roleName>ROLE_TENANT_ADMINISTRATOR</roleName>
         </role>
     </permissionRole>
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>d21d72d8-a9f9-40dd-a14d-7463bef3e457</permissionId>
+            <permissionId>b4355e36-3fec-4759-b88e-96595a1182e2</permissionId>
             <resourceName>vocabularies</resourceName>
         </permission>
         <role>
@@ -391,22 +391,22 @@
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>db3a13e8-d795-463d-a2f7-0bc1fb7e6782</permissionId>
+            <permissionId>a30f6399-95a6-4c68-8ecd-6a46d2b3c397</permissionId>
             <resourceName>vocabularyitems</resourceName>
         </permission>
         <role>
-            <roleId>b6af2c74-4238-44e1-b7c5-12b9a262a39e</roleId>
+            <roleId>45c752ca-75aa-4801-a65e-5b85119e4dde</roleId>
             <roleName>ROLE_TENANT_ADMINISTRATOR</roleName>
         </role>
         <role>
-            <roleId>9e848daa-2b35-444a-871b-95c9b998ed76</roleId>
+            <roleId>b5c798e6-3c1c-4c86-b9e0-40a5717bb084</roleId>
             <roleName>ROLE_TENANT_ADMINISTRATOR</roleName>
         </role>
     </permissionRole>
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>db3a13e8-d795-463d-a2f7-0bc1fb7e6782</permissionId>
+            <permissionId>a30f6399-95a6-4c68-8ecd-6a46d2b3c397</permissionId>
             <resourceName>vocabularyitems</resourceName>
         </permission>
         <role>
@@ -417,24 +417,24 @@
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>1f3ade41-7799-44db-86e5-0a8cb1122a69</permissionId>
+            <permissionId>30425726-f621-47d4-a7aa-6f2f51c15ec0</permissionId>
             <resourceName>
                 /vocabularies/*/items/
             </resourceName>
         </permission>
         <role>
-            <roleId>b6af2c74-4238-44e1-b7c5-12b9a262a39e</roleId>
+            <roleId>45c752ca-75aa-4801-a65e-5b85119e4dde</roleId>
             <roleName>ROLE_TENANT_ADMINISTRATOR</roleName>
         </role>
         <role>
-            <roleId>9e848daa-2b35-444a-871b-95c9b998ed76</roleId>
+            <roleId>b5c798e6-3c1c-4c86-b9e0-40a5717bb084</roleId>
             <roleName>ROLE_TENANT_ADMINISTRATOR</roleName>
         </role>
     </permissionRole>
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>1f3ade41-7799-44db-86e5-0a8cb1122a69</permissionId>
+            <permissionId>30425726-f621-47d4-a7aa-6f2f51c15ec0</permissionId>
             <resourceName>
                 /vocabularies/*/items/
             </resourceName>
@@ -447,22 +447,22 @@
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>302bccc4-dcf0-4790-b1ea-928eb8eeb422</permissionId>
+            <permissionId>71946447-2f14-423d-8d97-c5b5a504a43d</permissionId>
             <resourceName>orgauthorities</resourceName>
         </permission>
         <role>
-            <roleId>b6af2c74-4238-44e1-b7c5-12b9a262a39e</roleId>
+            <roleId>45c752ca-75aa-4801-a65e-5b85119e4dde</roleId>
             <roleName>ROLE_TENANT_ADMINISTRATOR</roleName>
         </role>
         <role>
-            <roleId>9e848daa-2b35-444a-871b-95c9b998ed76</roleId>
+            <roleId>b5c798e6-3c1c-4c86-b9e0-40a5717bb084</roleId>
             <roleName>ROLE_TENANT_ADMINISTRATOR</roleName>
         </role>
     </permissionRole>
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>302bccc4-dcf0-4790-b1ea-928eb8eeb422</permissionId>
+            <permissionId>71946447-2f14-423d-8d97-c5b5a504a43d</permissionId>
             <resourceName>orgauthorities</resourceName>
         </permission>
         <role>
@@ -473,24 +473,24 @@
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>78af26c0-d2d0-48d7-aad2-2b39a07de22e</permissionId>
+            <permissionId>8a576a05-4df4-40ce-8e6e-e361d115346b</permissionId>
             <resourceName>
                 /orgauthorities/*/items/*/authorityrefs/
             </resourceName>
         </permission>
         <role>
-            <roleId>b6af2c74-4238-44e1-b7c5-12b9a262a39e</roleId>
+            <roleId>45c752ca-75aa-4801-a65e-5b85119e4dde</roleId>
             <roleName>ROLE_TENANT_ADMINISTRATOR</roleName>
         </role>
         <role>
-            <roleId>9e848daa-2b35-444a-871b-95c9b998ed76</roleId>
+            <roleId>b5c798e6-3c1c-4c86-b9e0-40a5717bb084</roleId>
             <roleName>ROLE_TENANT_ADMINISTRATOR</roleName>
         </role>
     </permissionRole>
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>78af26c0-d2d0-48d7-aad2-2b39a07de22e</permissionId>
+            <permissionId>8a576a05-4df4-40ce-8e6e-e361d115346b</permissionId>
             <resourceName>
                 /orgauthorities/*/items/*/authorityrefs/
             </resourceName>
@@ -503,22 +503,22 @@
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>16b37ab0-06f4-4c61-822d-58dc11175a29</permissionId>
+            <permissionId>3f19ad0d-7a32-4179-9eb4-a92e9b9950ab</permissionId>
             <resourceName>organizations</resourceName>
         </permission>
         <role>
-            <roleId>b6af2c74-4238-44e1-b7c5-12b9a262a39e</roleId>
+            <roleId>45c752ca-75aa-4801-a65e-5b85119e4dde</roleId>
             <roleName>ROLE_TENANT_ADMINISTRATOR</roleName>
         </role>
         <role>
-            <roleId>9e848daa-2b35-444a-871b-95c9b998ed76</roleId>
+            <roleId>b5c798e6-3c1c-4c86-b9e0-40a5717bb084</roleId>
             <roleName>ROLE_TENANT_ADMINISTRATOR</roleName>
         </role>
     </permissionRole>
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>16b37ab0-06f4-4c61-822d-58dc11175a29</permissionId>
+            <permissionId>3f19ad0d-7a32-4179-9eb4-a92e9b9950ab</permissionId>
             <resourceName>organizations</resourceName>
         </permission>
         <role>
@@ -529,24 +529,24 @@
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>ecda26f6-0561-48cd-976b-c429248162c2</permissionId>
+            <permissionId>2a82f7d6-4051-4d4f-a460-5f50f94088d6</permissionId>
             <resourceName>
                 /orgauthorities/*/items/
             </resourceName>
         </permission>
         <role>
-            <roleId>b6af2c74-4238-44e1-b7c5-12b9a262a39e</roleId>
+            <roleId>45c752ca-75aa-4801-a65e-5b85119e4dde</roleId>
             <roleName>ROLE_TENANT_ADMINISTRATOR</roleName>
         </role>
         <role>
-            <roleId>9e848daa-2b35-444a-871b-95c9b998ed76</roleId>
+            <roleId>b5c798e6-3c1c-4c86-b9e0-40a5717bb084</roleId>
             <roleName>ROLE_TENANT_ADMINISTRATOR</roleName>
         </role>
     </permissionRole>
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>ecda26f6-0561-48cd-976b-c429248162c2</permissionId>
+            <permissionId>2a82f7d6-4051-4d4f-a460-5f50f94088d6</permissionId>
             <resourceName>
                 /orgauthorities/*/items/
             </resourceName>
@@ -559,24 +559,24 @@
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>7134a8c0-4e8a-49f0-9fcd-25f0f4d2aadd</permissionId>
+            <permissionId>5963d650-0c56-48ef-b2c0-6aaafad4d29c</permissionId>
             <resourceName>
                 /orgauthorities/*/items/*/refobjs
             </resourceName>
         </permission>
         <role>
-            <roleId>b6af2c74-4238-44e1-b7c5-12b9a262a39e</roleId>
+            <roleId>45c752ca-75aa-4801-a65e-5b85119e4dde</roleId>
             <roleName>ROLE_TENANT_ADMINISTRATOR</roleName>
         </role>
         <role>
-            <roleId>9e848daa-2b35-444a-871b-95c9b998ed76</roleId>
+            <roleId>b5c798e6-3c1c-4c86-b9e0-40a5717bb084</roleId>
             <roleName>ROLE_TENANT_ADMINISTRATOR</roleName>
         </role>
     </permissionRole>
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>7134a8c0-4e8a-49f0-9fcd-25f0f4d2aadd</permissionId>
+            <permissionId>5963d650-0c56-48ef-b2c0-6aaafad4d29c</permissionId>
             <resourceName>
                 /orgauthorities/*/items/*/refobjs
             </resourceName>
@@ -589,22 +589,22 @@
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>59563bb2-747a-4be1-b725-b19164786088</permissionId>
+            <permissionId>7923a8eb-086f-4884-9677-4b92b1ebeb49</permissionId>
             <resourceName>personauthorities</resourceName>
         </permission>
         <role>
-            <roleId>b6af2c74-4238-44e1-b7c5-12b9a262a39e</roleId>
+            <roleId>45c752ca-75aa-4801-a65e-5b85119e4dde</roleId>
             <roleName>ROLE_TENANT_ADMINISTRATOR</roleName>
         </role>
         <role>
-            <roleId>9e848daa-2b35-444a-871b-95c9b998ed76</roleId>
+            <roleId>b5c798e6-3c1c-4c86-b9e0-40a5717bb084</roleId>
             <roleName>ROLE_TENANT_ADMINISTRATOR</roleName>
         </role>
     </permissionRole>
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>59563bb2-747a-4be1-b725-b19164786088</permissionId>
+            <permissionId>7923a8eb-086f-4884-9677-4b92b1ebeb49</permissionId>
             <resourceName>personauthorities</resourceName>
         </permission>
         <role>
@@ -615,24 +615,24 @@
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>859b02e3-2496-4bef-86b9-eded6efc26c3</permissionId>
+            <permissionId>ad893bde-69bf-433b-b69c-1d2f7310f8d5</permissionId>
             <resourceName>
                 /personauthorities/*/items/
             </resourceName>
         </permission>
         <role>
-            <roleId>b6af2c74-4238-44e1-b7c5-12b9a262a39e</roleId>
+            <roleId>45c752ca-75aa-4801-a65e-5b85119e4dde</roleId>
             <roleName>ROLE_TENANT_ADMINISTRATOR</roleName>
         </role>
         <role>
-            <roleId>9e848daa-2b35-444a-871b-95c9b998ed76</roleId>
+            <roleId>b5c798e6-3c1c-4c86-b9e0-40a5717bb084</roleId>
             <roleName>ROLE_TENANT_ADMINISTRATOR</roleName>
         </role>
     </permissionRole>
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>859b02e3-2496-4bef-86b9-eded6efc26c3</permissionId>
+            <permissionId>ad893bde-69bf-433b-b69c-1d2f7310f8d5</permissionId>
             <resourceName>
                 /personauthorities/*/items/
             </resourceName>
@@ -645,24 +645,24 @@
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>c1925e22-a9b1-49ba-a2f3-9bec0f49dc73</permissionId>
+            <permissionId>4c2fa893-2dbb-47a4-954f-f29d9660360c</permissionId>
             <resourceName>
                 /personauthorities/*/items/*/refobjs
             </resourceName>
         </permission>
         <role>
-            <roleId>b6af2c74-4238-44e1-b7c5-12b9a262a39e</roleId>
+            <roleId>45c752ca-75aa-4801-a65e-5b85119e4dde</roleId>
             <roleName>ROLE_TENANT_ADMINISTRATOR</roleName>
         </role>
         <role>
-            <roleId>9e848daa-2b35-444a-871b-95c9b998ed76</roleId>
+            <roleId>b5c798e6-3c1c-4c86-b9e0-40a5717bb084</roleId>
             <roleName>ROLE_TENANT_ADMINISTRATOR</roleName>
         </role>
     </permissionRole>
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>c1925e22-a9b1-49ba-a2f3-9bec0f49dc73</permissionId>
+            <permissionId>4c2fa893-2dbb-47a4-954f-f29d9660360c</permissionId>
             <resourceName>
                 /personauthorities/*/items/*/refobjs
             </resourceName>
@@ -675,22 +675,22 @@
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>14d1ec5d-7aec-4434-a87b-3c241d57c990</permissionId>
+            <permissionId>4dff584a-44c7-4779-afe0-09c4f1b6419e</permissionId>
             <resourceName>persons</resourceName>
         </permission>
         <role>
-            <roleId>b6af2c74-4238-44e1-b7c5-12b9a262a39e</roleId>
+            <roleId>45c752ca-75aa-4801-a65e-5b85119e4dde</roleId>
             <roleName>ROLE_TENANT_ADMINISTRATOR</roleName>
         </role>
         <role>
-            <roleId>9e848daa-2b35-444a-871b-95c9b998ed76</roleId>
+            <roleId>b5c798e6-3c1c-4c86-b9e0-40a5717bb084</roleId>
             <roleName>ROLE_TENANT_ADMINISTRATOR</roleName>
         </role>
     </permissionRole>
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>14d1ec5d-7aec-4434-a87b-3c241d57c990</permissionId>
+            <permissionId>4dff584a-44c7-4779-afe0-09c4f1b6419e</permissionId>
             <resourceName>persons</resourceName>
         </permission>
         <role>
@@ -701,24 +701,24 @@
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>e996ffda-ab9b-4496-ae5e-fbf4fc0c2095</permissionId>
+            <permissionId>bdf71a87-fbbd-4679-ba43-753a760547da</permissionId>
             <resourceName>
                 /personauthorities/*/items/
             </resourceName>
         </permission>
         <role>
-            <roleId>b6af2c74-4238-44e1-b7c5-12b9a262a39e</roleId>
+            <roleId>45c752ca-75aa-4801-a65e-5b85119e4dde</roleId>
             <roleName>ROLE_TENANT_ADMINISTRATOR</roleName>
         </role>
         <role>
-            <roleId>9e848daa-2b35-444a-871b-95c9b998ed76</roleId>
+            <roleId>b5c798e6-3c1c-4c86-b9e0-40a5717bb084</roleId>
             <roleName>ROLE_TENANT_ADMINISTRATOR</roleName>
         </role>
     </permissionRole>
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>e996ffda-ab9b-4496-ae5e-fbf4fc0c2095</permissionId>
+            <permissionId>bdf71a87-fbbd-4679-ba43-753a760547da</permissionId>
             <resourceName>
                 /personauthorities/*/items/
             </resourceName>
@@ -731,22 +731,22 @@
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>98aabdae-d3a5-498e-9b88-2a10e08bbff2</permissionId>
+            <permissionId>efa8ce59-07ff-4f5b-a840-f06d7c731599</permissionId>
             <resourceName>locationauthorities</resourceName>
         </permission>
         <role>
-            <roleId>b6af2c74-4238-44e1-b7c5-12b9a262a39e</roleId>
+            <roleId>45c752ca-75aa-4801-a65e-5b85119e4dde</roleId>
             <roleName>ROLE_TENANT_ADMINISTRATOR</roleName>
         </role>
         <role>
-            <roleId>9e848daa-2b35-444a-871b-95c9b998ed76</roleId>
+            <roleId>b5c798e6-3c1c-4c86-b9e0-40a5717bb084</roleId>
             <roleName>ROLE_TENANT_ADMINISTRATOR</roleName>
         </role>
     </permissionRole>
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>98aabdae-d3a5-498e-9b88-2a10e08bbff2</permissionId>
+            <permissionId>efa8ce59-07ff-4f5b-a840-f06d7c731599</permissionId>
             <resourceName>locationauthorities</resourceName>
         </permission>
         <role>
@@ -757,24 +757,24 @@
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>c2cc174c-77ae-4465-8020-4345b95ca22b</permissionId>
+            <permissionId>be3e4867-73db-4967-a1b0-61bcc268cc74</permissionId>
             <resourceName>
                 /locationauthorities/*/items/
             </resourceName>
         </permission>
         <role>
-            <roleId>b6af2c74-4238-44e1-b7c5-12b9a262a39e</roleId>
+            <roleId>45c752ca-75aa-4801-a65e-5b85119e4dde</roleId>
             <roleName>ROLE_TENANT_ADMINISTRATOR</roleName>
         </role>
         <role>
-            <roleId>9e848daa-2b35-444a-871b-95c9b998ed76</roleId>
+            <roleId>b5c798e6-3c1c-4c86-b9e0-40a5717bb084</roleId>
             <roleName>ROLE_TENANT_ADMINISTRATOR</roleName>
         </role>
     </permissionRole>
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>c2cc174c-77ae-4465-8020-4345b95ca22b</permissionId>
+            <permissionId>be3e4867-73db-4967-a1b0-61bcc268cc74</permissionId>
             <resourceName>
                 /locationauthorities/*/items/
             </resourceName>
@@ -787,22 +787,22 @@
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>bc95ef29-37ea-445e-8333-d23e425dabc0</permissionId>
+            <permissionId>f7b0955f-ff85-4153-98ef-bcb2d6557895</permissionId>
             <resourceName>locations</resourceName>
         </permission>
         <role>
-            <roleId>b6af2c74-4238-44e1-b7c5-12b9a262a39e</roleId>
+            <roleId>45c752ca-75aa-4801-a65e-5b85119e4dde</roleId>
             <roleName>ROLE_TENANT_ADMINISTRATOR</roleName>
         </role>
         <role>
-            <roleId>9e848daa-2b35-444a-871b-95c9b998ed76</roleId>
+            <roleId>b5c798e6-3c1c-4c86-b9e0-40a5717bb084</roleId>
             <roleName>ROLE_TENANT_ADMINISTRATOR</roleName>
         </role>
     </permissionRole>
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>bc95ef29-37ea-445e-8333-d23e425dabc0</permissionId>
+            <permissionId>f7b0955f-ff85-4153-98ef-bcb2d6557895</permissionId>
             <resourceName>locations</resourceName>
         </permission>
         <role>
@@ -813,22 +813,22 @@
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>5aa40337-279e-4174-9b6b-04fc902f3759</permissionId>
+            <permissionId>680db6da-ece6-41b7-949e-242e8753b44a</permissionId>
             <resourceName>acquisitions</resourceName>
         </permission>
         <role>
-            <roleId>b6af2c74-4238-44e1-b7c5-12b9a262a39e</roleId>
+            <roleId>45c752ca-75aa-4801-a65e-5b85119e4dde</roleId>
             <roleName>ROLE_TENANT_ADMINISTRATOR</roleName>
         </role>
         <role>
-            <roleId>9e848daa-2b35-444a-871b-95c9b998ed76</roleId>
+            <roleId>b5c798e6-3c1c-4c86-b9e0-40a5717bb084</roleId>
             <roleName>ROLE_TENANT_ADMINISTRATOR</roleName>
         </role>
     </permissionRole>
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>5aa40337-279e-4174-9b6b-04fc902f3759</permissionId>
+            <permissionId>680db6da-ece6-41b7-949e-242e8753b44a</permissionId>
             <resourceName>acquisitions</resourceName>
         </permission>
         <role>
@@ -839,24 +839,24 @@
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>9157f4b1-acad-455d-a9eb-60bb8cb63bc2</permissionId>
+            <permissionId>8b322e33-b1f8-4162-abc2-48c6648296e8</permissionId>
             <resourceName>
                 /acquisitions/*/authorityrefs/
             </resourceName>
         </permission>
         <role>
-            <roleId>b6af2c74-4238-44e1-b7c5-12b9a262a39e</roleId>
+            <roleId>45c752ca-75aa-4801-a65e-5b85119e4dde</roleId>
             <roleName>ROLE_TENANT_ADMINISTRATOR</roleName>
         </role>
         <role>
-            <roleId>9e848daa-2b35-444a-871b-95c9b998ed76</roleId>
+            <roleId>b5c798e6-3c1c-4c86-b9e0-40a5717bb084</roleId>
             <roleName>ROLE_TENANT_ADMINISTRATOR</roleName>
         </role>
     </permissionRole>
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>9157f4b1-acad-455d-a9eb-60bb8cb63bc2</permissionId>
+            <permissionId>8b322e33-b1f8-4162-abc2-48c6648296e8</permissionId>
             <resourceName>
                 /acquisitions/*/authorityrefs/
             </resourceName>
@@ -869,22 +869,22 @@
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>bbe0d2e4-dde6-484a-a413-c6c20f89ff7e</permissionId>
+            <permissionId>bcca627d-8ed5-49fe-ac10-86226e8d314c</permissionId>
             <resourceName>relations</resourceName>
         </permission>
         <role>
-            <roleId>b6af2c74-4238-44e1-b7c5-12b9a262a39e</roleId>
+            <roleId>45c752ca-75aa-4801-a65e-5b85119e4dde</roleId>
             <roleName>ROLE_TENANT_ADMINISTRATOR</roleName>
         </role>
         <role>
-            <roleId>9e848daa-2b35-444a-871b-95c9b998ed76</roleId>
+            <roleId>b5c798e6-3c1c-4c86-b9e0-40a5717bb084</roleId>
             <roleName>ROLE_TENANT_ADMINISTRATOR</roleName>
         </role>
     </permissionRole>
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>bbe0d2e4-dde6-484a-a413-c6c20f89ff7e</permissionId>
+            <permissionId>bcca627d-8ed5-49fe-ac10-86226e8d314c</permissionId>
             <resourceName>relations</resourceName>
         </permission>
         <role>
@@ -895,26 +895,26 @@
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>3e8bdbf8-2179-460a-93b9-9fc568b811b9</permissionId>
+            <permissionId>c016b267-869a-4249-b875-6266cc6beed0</permissionId>
             <resourceName>
-                relations/subject/*/type/*/object/*
+                /relations/object/*
             </resourceName>
         </permission>
         <role>
-            <roleId>b6af2c74-4238-44e1-b7c5-12b9a262a39e</roleId>
+            <roleId>45c752ca-75aa-4801-a65e-5b85119e4dde</roleId>
             <roleName>ROLE_TENANT_ADMINISTRATOR</roleName>
         </role>
         <role>
-            <roleId>9e848daa-2b35-444a-871b-95c9b998ed76</roleId>
+            <roleId>b5c798e6-3c1c-4c86-b9e0-40a5717bb084</roleId>
             <roleName>ROLE_TENANT_ADMINISTRATOR</roleName>
         </role>
     </permissionRole>
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>3e8bdbf8-2179-460a-93b9-9fc568b811b9</permissionId>
+            <permissionId>c016b267-869a-4249-b875-6266cc6beed0</permissionId>
             <resourceName>
-                relations/subject/*/type/*/object/*
+                /relations/object/*
             </resourceName>
         </permission>
         <role>
@@ -925,22 +925,262 @@
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>a3846604-8781-4ce8-a8ee-8dd5b6a8875f</permissionId>
+            <permissionId>b06dcf8a-3c73-4ec6-aac0-630b66452ddd</permissionId>
+            <resourceName>
+                /relations/object/*/type/*
+            </resourceName>
+        </permission>
+        <role>
+            <roleId>45c752ca-75aa-4801-a65e-5b85119e4dde</roleId>
+            <roleName>ROLE_TENANT_ADMINISTRATOR</roleName>
+        </role>
+        <role>
+            <roleId>b5c798e6-3c1c-4c86-b9e0-40a5717bb084</roleId>
+            <roleName>ROLE_TENANT_ADMINISTRATOR</roleName>
+        </role>
+    </permissionRole>
+    <permissionRole>
+        <subject>ROLE</subject>
+        <permission>
+            <permissionId>b06dcf8a-3c73-4ec6-aac0-630b66452ddd</permissionId>
+            <resourceName>
+                /relations/object/*/type/*
+            </resourceName>
+        </permission>
+        <role>
+            <roleId>0</roleId>
+            <roleName>ROLE_ADMINISTRATOR</roleName>
+        </role>
+    </permissionRole>
+    <permissionRole>
+        <subject>ROLE</subject>
+        <permission>
+            <permissionId>c6485a0d-a9c8-4bb2-a508-45e2f08e019c</permissionId>
+            <resourceName>
+                /relations/subject/*
+            </resourceName>
+        </permission>
+        <role>
+            <roleId>45c752ca-75aa-4801-a65e-5b85119e4dde</roleId>
+            <roleName>ROLE_TENANT_ADMINISTRATOR</roleName>
+        </role>
+        <role>
+            <roleId>b5c798e6-3c1c-4c86-b9e0-40a5717bb084</roleId>
+            <roleName>ROLE_TENANT_ADMINISTRATOR</roleName>
+        </role>
+    </permissionRole>
+    <permissionRole>
+        <subject>ROLE</subject>
+        <permission>
+            <permissionId>c6485a0d-a9c8-4bb2-a508-45e2f08e019c</permissionId>
+            <resourceName>
+                /relations/subject/*
+            </resourceName>
+        </permission>
+        <role>
+            <roleId>0</roleId>
+            <roleName>ROLE_ADMINISTRATOR</roleName>
+        </role>
+    </permissionRole>
+    <permissionRole>
+        <subject>ROLE</subject>
+        <permission>
+            <permissionId>d4da49a7-fdaf-4dcb-a609-be1365adf3eb</permissionId>
+            <resourceName>
+                /relations/subject/*/type/*
+            </resourceName>
+        </permission>
+        <role>
+            <roleId>45c752ca-75aa-4801-a65e-5b85119e4dde</roleId>
+            <roleName>ROLE_TENANT_ADMINISTRATOR</roleName>
+        </role>
+        <role>
+            <roleId>b5c798e6-3c1c-4c86-b9e0-40a5717bb084</roleId>
+            <roleName>ROLE_TENANT_ADMINISTRATOR</roleName>
+        </role>
+    </permissionRole>
+    <permissionRole>
+        <subject>ROLE</subject>
+        <permission>
+            <permissionId>d4da49a7-fdaf-4dcb-a609-be1365adf3eb</permissionId>
+            <resourceName>
+                /relations/subject/*/type/*
+            </resourceName>
+        </permission>
+        <role>
+            <roleId>0</roleId>
+            <roleName>ROLE_ADMINISTRATOR</roleName>
+        </role>
+    </permissionRole>
+    <permissionRole>
+        <subject>ROLE</subject>
+        <permission>
+            <permissionId>dab555c4-f87e-4a55-b6ef-303a1e4e3d52</permissionId>
+            <resourceName>
+                /relations/subject/*/type/*/object/*
+            </resourceName>
+        </permission>
+        <role>
+            <roleId>45c752ca-75aa-4801-a65e-5b85119e4dde</roleId>
+            <roleName>ROLE_TENANT_ADMINISTRATOR</roleName>
+        </role>
+        <role>
+            <roleId>b5c798e6-3c1c-4c86-b9e0-40a5717bb084</roleId>
+            <roleName>ROLE_TENANT_ADMINISTRATOR</roleName>
+        </role>
+    </permissionRole>
+    <permissionRole>
+        <subject>ROLE</subject>
+        <permission>
+            <permissionId>dab555c4-f87e-4a55-b6ef-303a1e4e3d52</permissionId>
+            <resourceName>
+                /relations/subject/*/type/*/object/*
+            </resourceName>
+        </permission>
+        <role>
+            <roleId>0</roleId>
+            <roleName>ROLE_ADMINISTRATOR</roleName>
+        </role>
+    </permissionRole>
+    <permissionRole>
+        <subject>ROLE</subject>
+        <permission>
+            <permissionId>6b901d1f-d48e-4abd-aa34-ad86071e16b5</permissionId>
+            <resourceName>
+                /relations/type/*
+            </resourceName>
+        </permission>
+        <role>
+            <roleId>45c752ca-75aa-4801-a65e-5b85119e4dde</roleId>
+            <roleName>ROLE_TENANT_ADMINISTRATOR</roleName>
+        </role>
+        <role>
+            <roleId>b5c798e6-3c1c-4c86-b9e0-40a5717bb084</roleId>
+            <roleName>ROLE_TENANT_ADMINISTRATOR</roleName>
+        </role>
+    </permissionRole>
+    <permissionRole>
+        <subject>ROLE</subject>
+        <permission>
+            <permissionId>6b901d1f-d48e-4abd-aa34-ad86071e16b5</permissionId>
+            <resourceName>
+                /relations/type/*
+            </resourceName>
+        </permission>
+        <role>
+            <roleId>0</roleId>
+            <roleName>ROLE_ADMINISTRATOR</roleName>
+        </role>
+    </permissionRole>
+    <permissionRole>
+        <subject>ROLE</subject>
+        <permission>
+            <permissionId>14598bc1-98a3-4be1-ac1d-2b0627de1d73</permissionId>
+            <resourceName>
+                /relations/type/*/object/*
+            </resourceName>
+        </permission>
+        <role>
+            <roleId>45c752ca-75aa-4801-a65e-5b85119e4dde</roleId>
+            <roleName>ROLE_TENANT_ADMINISTRATOR</roleName>
+        </role>
+        <role>
+            <roleId>b5c798e6-3c1c-4c86-b9e0-40a5717bb084</roleId>
+            <roleName>ROLE_TENANT_ADMINISTRATOR</roleName>
+        </role>
+    </permissionRole>
+    <permissionRole>
+        <subject>ROLE</subject>
+        <permission>
+            <permissionId>14598bc1-98a3-4be1-ac1d-2b0627de1d73</permissionId>
+            <resourceName>
+                /relations/type/*/object/*
+            </resourceName>
+        </permission>
+        <role>
+            <roleId>0</roleId>
+            <roleName>ROLE_ADMINISTRATOR</roleName>
+        </role>
+    </permissionRole>
+    <permissionRole>
+        <subject>ROLE</subject>
+        <permission>
+            <permissionId>794d6241-dfe3-4878-9ee8-c01e762e0b97</permissionId>
+            <resourceName>
+                /relations/type/*/subject/*
+            </resourceName>
+        </permission>
+        <role>
+            <roleId>45c752ca-75aa-4801-a65e-5b85119e4dde</roleId>
+            <roleName>ROLE_TENANT_ADMINISTRATOR</roleName>
+        </role>
+        <role>
+            <roleId>b5c798e6-3c1c-4c86-b9e0-40a5717bb084</roleId>
+            <roleName>ROLE_TENANT_ADMINISTRATOR</roleName>
+        </role>
+    </permissionRole>
+    <permissionRole>
+        <subject>ROLE</subject>
+        <permission>
+            <permissionId>794d6241-dfe3-4878-9ee8-c01e762e0b97</permissionId>
+            <resourceName>
+                /relations/type/*/subject/*
+            </resourceName>
+        </permission>
+        <role>
+            <roleId>0</roleId>
+            <roleName>ROLE_ADMINISTRATOR</roleName>
+        </role>
+    </permissionRole>
+    <permissionRole>
+        <subject>ROLE</subject>
+        <permission>
+            <permissionId>d5d555d7-2bef-4440-a568-70906599c3e5</permissionId>
+            <resourceName>
+                /relations/type/*/subject/*/object/*
+            </resourceName>
+        </permission>
+        <role>
+            <roleId>45c752ca-75aa-4801-a65e-5b85119e4dde</roleId>
+            <roleName>ROLE_TENANT_ADMINISTRATOR</roleName>
+        </role>
+        <role>
+            <roleId>b5c798e6-3c1c-4c86-b9e0-40a5717bb084</roleId>
+            <roleName>ROLE_TENANT_ADMINISTRATOR</roleName>
+        </role>
+    </permissionRole>
+    <permissionRole>
+        <subject>ROLE</subject>
+        <permission>
+            <permissionId>d5d555d7-2bef-4440-a568-70906599c3e5</permissionId>
+            <resourceName>
+                /relations/type/*/subject/*/object/*
+            </resourceName>
+        </permission>
+        <role>
+            <roleId>0</roleId>
+            <roleName>ROLE_ADMINISTRATOR</roleName>
+        </role>
+    </permissionRole>
+    <permissionRole>
+        <subject>ROLE</subject>
+        <permission>
+            <permissionId>738be548-ab9f-47f3-b833-cc88a7fadadc</permissionId>
             <resourceName>accounts</resourceName>
         </permission>
         <role>
-            <roleId>b6af2c74-4238-44e1-b7c5-12b9a262a39e</roleId>
+            <roleId>45c752ca-75aa-4801-a65e-5b85119e4dde</roleId>
             <roleName>ROLE_TENANT_ADMINISTRATOR</roleName>
         </role>
         <role>
-            <roleId>9e848daa-2b35-444a-871b-95c9b998ed76</roleId>
+            <roleId>b5c798e6-3c1c-4c86-b9e0-40a5717bb084</roleId>
             <roleName>ROLE_TENANT_ADMINISTRATOR</roleName>
         </role>
     </permissionRole>
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>a3846604-8781-4ce8-a8ee-8dd5b6a8875f</permissionId>
+            <permissionId>738be548-ab9f-47f3-b833-cc88a7fadadc</permissionId>
             <resourceName>accounts</resourceName>
         </permission>
         <role>
@@ -951,22 +1191,22 @@
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>c14386ba-d17c-4dd3-a154-8ce06efeb88b</permissionId>
+            <permissionId>d0dde634-6382-494a-ab58-e48a2400c3c4</permissionId>
             <resourceName>dimensions</resourceName>
         </permission>
         <role>
-            <roleId>b6af2c74-4238-44e1-b7c5-12b9a262a39e</roleId>
+            <roleId>45c752ca-75aa-4801-a65e-5b85119e4dde</roleId>
             <roleName>ROLE_TENANT_ADMINISTRATOR</roleName>
         </role>
         <role>
-            <roleId>9e848daa-2b35-444a-871b-95c9b998ed76</roleId>
+            <roleId>b5c798e6-3c1c-4c86-b9e0-40a5717bb084</roleId>
             <roleName>ROLE_TENANT_ADMINISTRATOR</roleName>
         </role>
     </permissionRole>
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>c14386ba-d17c-4dd3-a154-8ce06efeb88b</permissionId>
+            <permissionId>d0dde634-6382-494a-ab58-e48a2400c3c4</permissionId>
             <resourceName>dimensions</resourceName>
         </permission>
         <role>
@@ -977,22 +1217,22 @@
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>6c76319d-ae10-438c-81a8-2d414467f4f2</permissionId>
+            <permissionId>d0ffd0b6-4bb6-4862-8186-ea3346d83e4d</permissionId>
             <resourceName>contacts</resourceName>
         </permission>
         <role>
-            <roleId>b6af2c74-4238-44e1-b7c5-12b9a262a39e</roleId>
+            <roleId>45c752ca-75aa-4801-a65e-5b85119e4dde</roleId>
             <roleName>ROLE_TENANT_ADMINISTRATOR</roleName>
         </role>
         <role>
-            <roleId>9e848daa-2b35-444a-871b-95c9b998ed76</roleId>
+            <roleId>b5c798e6-3c1c-4c86-b9e0-40a5717bb084</roleId>
             <roleName>ROLE_TENANT_ADMINISTRATOR</roleName>
         </role>
     </permissionRole>
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>6c76319d-ae10-438c-81a8-2d414467f4f2</permissionId>
+            <permissionId>d0ffd0b6-4bb6-4862-8186-ea3346d83e4d</permissionId>
             <resourceName>contacts</resourceName>
         </permission>
         <role>
@@ -1003,24 +1243,24 @@
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>ba018b2f-b239-4710-8279-f306a9a4e387</permissionId>
+            <permissionId>e97f32c5-1327-481b-b45a-205ec7a848c0</permissionId>
             <resourceName>
                 /personauthorities/*/items/*/contacts
             </resourceName>
         </permission>
         <role>
-            <roleId>b6af2c74-4238-44e1-b7c5-12b9a262a39e</roleId>
+            <roleId>45c752ca-75aa-4801-a65e-5b85119e4dde</roleId>
             <roleName>ROLE_TENANT_ADMINISTRATOR</roleName>
         </role>
         <role>
-            <roleId>9e848daa-2b35-444a-871b-95c9b998ed76</roleId>
+            <roleId>b5c798e6-3c1c-4c86-b9e0-40a5717bb084</roleId>
             <roleName>ROLE_TENANT_ADMINISTRATOR</roleName>
         </role>
     </permissionRole>
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>ba018b2f-b239-4710-8279-f306a9a4e387</permissionId>
+            <permissionId>e97f32c5-1327-481b-b45a-205ec7a848c0</permissionId>
             <resourceName>
                 /personauthorities/*/items/*/contacts
             </resourceName>
@@ -1033,24 +1273,24 @@
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>53165bff-c95e-4a97-a39a-1ad340e168d2</permissionId>
+            <permissionId>0697c73b-44ca-4849-bbec-18718c1c52aa</permissionId>
             <resourceName>
                 /orgauthorities/*/items/*/contacts
             </resourceName>
         </permission>
         <role>
-            <roleId>b6af2c74-4238-44e1-b7c5-12b9a262a39e</roleId>
+            <roleId>45c752ca-75aa-4801-a65e-5b85119e4dde</roleId>
             <roleName>ROLE_TENANT_ADMINISTRATOR</roleName>
         </role>
         <role>
-            <roleId>9e848daa-2b35-444a-871b-95c9b998ed76</roleId>
+            <roleId>b5c798e6-3c1c-4c86-b9e0-40a5717bb084</roleId>
             <roleName>ROLE_TENANT_ADMINISTRATOR</roleName>
         </role>
     </permissionRole>
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>53165bff-c95e-4a97-a39a-1ad340e168d2</permissionId>
+            <permissionId>0697c73b-44ca-4849-bbec-18718c1c52aa</permissionId>
             <resourceName>
                 /orgauthorities/*/items/*/contacts
             </resourceName>
@@ -1063,22 +1303,22 @@
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>28e80b62-7df5-4711-8040-da8a97b76821</permissionId>
+            <permissionId>855eee73-dcfb-42ea-8a80-a8d5fd2b0fbf</permissionId>
             <resourceName>notes</resourceName>
         </permission>
         <role>
-            <roleId>b6af2c74-4238-44e1-b7c5-12b9a262a39e</roleId>
+            <roleId>45c752ca-75aa-4801-a65e-5b85119e4dde</roleId>
             <roleName>ROLE_TENANT_ADMINISTRATOR</roleName>
         </role>
         <role>
-            <roleId>9e848daa-2b35-444a-871b-95c9b998ed76</roleId>
+            <roleId>b5c798e6-3c1c-4c86-b9e0-40a5717bb084</roleId>
             <roleName>ROLE_TENANT_ADMINISTRATOR</roleName>
         </role>
     </permissionRole>
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>28e80b62-7df5-4711-8040-da8a97b76821</permissionId>
+            <permissionId>855eee73-dcfb-42ea-8a80-a8d5fd2b0fbf</permissionId>
             <resourceName>notes</resourceName>
         </permission>
         <role>
@@ -1089,22 +1329,22 @@
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>4d216907-5bb9-41d3-9a56-9d3313e12b23</permissionId>
+            <permissionId>9bc08b08-0f23-4efd-b44a-d88e85c8cce6</permissionId>
             <resourceName>authorization/roles</resourceName>
         </permission>
         <role>
-            <roleId>b6af2c74-4238-44e1-b7c5-12b9a262a39e</roleId>
+            <roleId>45c752ca-75aa-4801-a65e-5b85119e4dde</roleId>
             <roleName>ROLE_TENANT_ADMINISTRATOR</roleName>
         </role>
         <role>
-            <roleId>9e848daa-2b35-444a-871b-95c9b998ed76</roleId>
+            <roleId>b5c798e6-3c1c-4c86-b9e0-40a5717bb084</roleId>
             <roleName>ROLE_TENANT_ADMINISTRATOR</roleName>
         </role>
     </permissionRole>
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>4d216907-5bb9-41d3-9a56-9d3313e12b23</permissionId>
+            <permissionId>9bc08b08-0f23-4efd-b44a-d88e85c8cce6</permissionId>
             <resourceName>authorization/roles</resourceName>
         </permission>
         <role>
@@ -1115,22 +1355,22 @@
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>fb0bbb98-d3f8-4153-8465-77e4e17414c7</permissionId>
+            <permissionId>07bcadf0-285a-4522-8263-e0a3bd77dff2</permissionId>
             <resourceName>authorization/permissions</resourceName>
         </permission>
         <role>
-            <roleId>b6af2c74-4238-44e1-b7c5-12b9a262a39e</roleId>
+            <roleId>45c752ca-75aa-4801-a65e-5b85119e4dde</roleId>
             <roleName>ROLE_TENANT_ADMINISTRATOR</roleName>
         </role>
         <role>
-            <roleId>9e848daa-2b35-444a-871b-95c9b998ed76</roleId>
+            <roleId>b5c798e6-3c1c-4c86-b9e0-40a5717bb084</roleId>
             <roleName>ROLE_TENANT_ADMINISTRATOR</roleName>
         </role>
     </permissionRole>
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>fb0bbb98-d3f8-4153-8465-77e4e17414c7</permissionId>
+            <permissionId>07bcadf0-285a-4522-8263-e0a3bd77dff2</permissionId>
             <resourceName>authorization/permissions</resourceName>
         </permission>
         <role>
@@ -1141,22 +1381,22 @@
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>edcfafc7-908a-47de-93a5-907b83dbbdd2</permissionId>
+            <permissionId>86941ad6-f97f-4e9c-9f10-fd64ceba33a4</permissionId>
             <resourceName>authorization/permissions/permroles</resourceName>
         </permission>
         <role>
-            <roleId>b6af2c74-4238-44e1-b7c5-12b9a262a39e</roleId>
+            <roleId>45c752ca-75aa-4801-a65e-5b85119e4dde</roleId>
             <roleName>ROLE_TENANT_ADMINISTRATOR</roleName>
         </role>
         <role>
-            <roleId>9e848daa-2b35-444a-871b-95c9b998ed76</roleId>
+            <roleId>b5c798e6-3c1c-4c86-b9e0-40a5717bb084</roleId>
             <roleName>ROLE_TENANT_ADMINISTRATOR</roleName>
         </role>
     </permissionRole>
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>edcfafc7-908a-47de-93a5-907b83dbbdd2</permissionId>
+            <permissionId>86941ad6-f97f-4e9c-9f10-fd64ceba33a4</permissionId>
             <resourceName>authorization/permissions/permroles</resourceName>
         </permission>
         <role>
@@ -1167,24 +1407,24 @@
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>4b6ac5dd-46e1-4ae6-b9b5-0bcd6abbcb96</permissionId>
+            <permissionId>70f483c1-0d61-4da6-99ac-1306db3ba198</permissionId>
             <resourceName>
                 /authorization/permissions/*/permroles/
             </resourceName>
         </permission>
         <role>
-            <roleId>b6af2c74-4238-44e1-b7c5-12b9a262a39e</roleId>
+            <roleId>45c752ca-75aa-4801-a65e-5b85119e4dde</roleId>
             <roleName>ROLE_TENANT_ADMINISTRATOR</roleName>
         </role>
         <role>
-            <roleId>9e848daa-2b35-444a-871b-95c9b998ed76</roleId>
+            <roleId>b5c798e6-3c1c-4c86-b9e0-40a5717bb084</roleId>
             <roleName>ROLE_TENANT_ADMINISTRATOR</roleName>
         </role>
     </permissionRole>
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>4b6ac5dd-46e1-4ae6-b9b5-0bcd6abbcb96</permissionId>
+            <permissionId>70f483c1-0d61-4da6-99ac-1306db3ba198</permissionId>
             <resourceName>
                 /authorization/permissions/*/permroles/
             </resourceName>
@@ -1197,22 +1437,22 @@
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>a9de2ce1-dfba-43d9-8c4d-9edf55f16935</permissionId>
+            <permissionId>37d853f2-41c6-44b3-b3bc-519c20627a3f</permissionId>
             <resourceName>accounts/accountroles</resourceName>
         </permission>
         <role>
-            <roleId>b6af2c74-4238-44e1-b7c5-12b9a262a39e</roleId>
+            <roleId>45c752ca-75aa-4801-a65e-5b85119e4dde</roleId>
             <roleName>ROLE_TENANT_ADMINISTRATOR</roleName>
         </role>
         <role>
-            <roleId>9e848daa-2b35-444a-871b-95c9b998ed76</roleId>
+            <roleId>b5c798e6-3c1c-4c86-b9e0-40a5717bb084</roleId>
             <roleName>ROLE_TENANT_ADMINISTRATOR</roleName>
         </role>
     </permissionRole>
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>a9de2ce1-dfba-43d9-8c4d-9edf55f16935</permissionId>
+            <permissionId>37d853f2-41c6-44b3-b3bc-519c20627a3f</permissionId>
             <resourceName>accounts/accountroles</resourceName>
         </permission>
         <role>
@@ -1223,24 +1463,24 @@
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>bab39bc6-4a06-4e20-b49d-cb20599cc8e0</permissionId>
+            <permissionId>9b1f24dc-60b1-4d30-8a78-58a216ebbac3</permissionId>
             <resourceName>
                 /accounts/*/accountroles/
             </resourceName>
         </permission>
         <role>
-            <roleId>b6af2c74-4238-44e1-b7c5-12b9a262a39e</roleId>
+            <roleId>45c752ca-75aa-4801-a65e-5b85119e4dde</roleId>
             <roleName>ROLE_TENANT_ADMINISTRATOR</roleName>
         </role>
         <role>
-            <roleId>9e848daa-2b35-444a-871b-95c9b998ed76</roleId>
+            <roleId>b5c798e6-3c1c-4c86-b9e0-40a5717bb084</roleId>
             <roleName>ROLE_TENANT_ADMINISTRATOR</roleName>
         </role>
     </permissionRole>
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>bab39bc6-4a06-4e20-b49d-cb20599cc8e0</permissionId>
+            <permissionId>9b1f24dc-60b1-4d30-8a78-58a216ebbac3</permissionId>
             <resourceName>
                 /accounts/*/accountroles/
             </resourceName>
@@ -1253,22 +1493,22 @@
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>bb6074b5-7c0f-410a-a077-07e5102bd86f</permissionId>
+            <permissionId>084caa48-ffc6-45d7-aab3-ddeafacf322d</permissionId>
             <resourceName>authorization/roles/permroles</resourceName>
         </permission>
         <role>
-            <roleId>b6af2c74-4238-44e1-b7c5-12b9a262a39e</roleId>
+            <roleId>45c752ca-75aa-4801-a65e-5b85119e4dde</roleId>
             <roleName>ROLE_TENANT_ADMINISTRATOR</roleName>
         </role>
         <role>
-            <roleId>9e848daa-2b35-444a-871b-95c9b998ed76</roleId>
+            <roleId>b5c798e6-3c1c-4c86-b9e0-40a5717bb084</roleId>
             <roleName>ROLE_TENANT_ADMINISTRATOR</roleName>
         </role>
     </permissionRole>
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>bb6074b5-7c0f-410a-a077-07e5102bd86f</permissionId>
+            <permissionId>084caa48-ffc6-45d7-aab3-ddeafacf322d</permissionId>
             <resourceName>authorization/roles/permroles</resourceName>
         </permission>
         <role>
@@ -1279,24 +1519,24 @@
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>fd71fc5b-76ae-4d2c-a011-d6ebd350799c</permissionId>
+            <permissionId>997129b8-e0dd-4319-8192-fe1dd81011c3</permissionId>
             <resourceName>
                 /authorization/roles/*/permroles/
             </resourceName>
         </permission>
         <role>
-            <roleId>b6af2c74-4238-44e1-b7c5-12b9a262a39e</roleId>
+            <roleId>45c752ca-75aa-4801-a65e-5b85119e4dde</roleId>
             <roleName>ROLE_TENANT_ADMINISTRATOR</roleName>
         </role>
         <role>
-            <roleId>9e848daa-2b35-444a-871b-95c9b998ed76</roleId>
+            <roleId>b5c798e6-3c1c-4c86-b9e0-40a5717bb084</roleId>
             <roleName>ROLE_TENANT_ADMINISTRATOR</roleName>
         </role>
     </permissionRole>
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>fd71fc5b-76ae-4d2c-a011-d6ebd350799c</permissionId>
+            <permissionId>997129b8-e0dd-4319-8192-fe1dd81011c3</permissionId>
             <resourceName>
                 /authorization/roles/*/permroles/
             </resourceName>
@@ -1309,22 +1549,22 @@
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>d785edac-30d7-4b1f-b120-d25c5cfa7459</permissionId>
+            <permissionId>64b5cfcc-fcae-4739-a0c4-59285d78bc76</permissionId>
             <resourceName>idgenerators</resourceName>
         </permission>
         <role>
-            <roleId>b6af2c74-4238-44e1-b7c5-12b9a262a39e</roleId>
+            <roleId>45c752ca-75aa-4801-a65e-5b85119e4dde</roleId>
             <roleName>ROLE_TENANT_ADMINISTRATOR</roleName>
         </role>
         <role>
-            <roleId>9e848daa-2b35-444a-871b-95c9b998ed76</roleId>
+            <roleId>b5c798e6-3c1c-4c86-b9e0-40a5717bb084</roleId>
             <roleName>ROLE_TENANT_ADMINISTRATOR</roleName>
         </role>
     </permissionRole>
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>d785edac-30d7-4b1f-b120-d25c5cfa7459</permissionId>
+            <permissionId>64b5cfcc-fcae-4739-a0c4-59285d78bc76</permissionId>
             <resourceName>idgenerators</resourceName>
         </permission>
         <role>
@@ -1335,22 +1575,22 @@
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>0b4da442-b30c-4445-9bb4-0838d6153db5</permissionId>
+            <permissionId>9d18e1bf-0aaa-4207-9128-809167ba84ad</permissionId>
             <resourceName>id</resourceName>
         </permission>
         <role>
-            <roleId>b6af2c74-4238-44e1-b7c5-12b9a262a39e</roleId>
+            <roleId>45c752ca-75aa-4801-a65e-5b85119e4dde</roleId>
             <roleName>ROLE_TENANT_ADMINISTRATOR</roleName>
         </role>
         <role>
-            <roleId>9e848daa-2b35-444a-871b-95c9b998ed76</roleId>
+            <roleId>b5c798e6-3c1c-4c86-b9e0-40a5717bb084</roleId>
             <roleName>ROLE_TENANT_ADMINISTRATOR</roleName>
         </role>
     </permissionRole>
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>0b4da442-b30c-4445-9bb4-0838d6153db5</permissionId>
+            <permissionId>9d18e1bf-0aaa-4207-9128-809167ba84ad</permissionId>
             <resourceName>id</resourceName>
         </permission>
         <role>
@@ -1361,24 +1601,24 @@
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>7ea90ded-ebca-4046-98fb-fdef5041f385</permissionId>
+            <permissionId>7b60568b-0466-44fc-bfd6-8d68efee44a0</permissionId>
             <resourceName>
                 /idgenerators/*/ids
             </resourceName>
         </permission>
         <role>
-            <roleId>b6af2c74-4238-44e1-b7c5-12b9a262a39e</roleId>
+            <roleId>45c752ca-75aa-4801-a65e-5b85119e4dde</roleId>
             <roleName>ROLE_TENANT_ADMINISTRATOR</roleName>
         </role>
         <role>
-            <roleId>9e848daa-2b35-444a-871b-95c9b998ed76</roleId>
+            <roleId>b5c798e6-3c1c-4c86-b9e0-40a5717bb084</roleId>
             <roleName>ROLE_TENANT_ADMINISTRATOR</roleName>
         </role>
     </permissionRole>
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>7ea90ded-ebca-4046-98fb-fdef5041f385</permissionId>
+            <permissionId>7b60568b-0466-44fc-bfd6-8d68efee44a0</permissionId>
             <resourceName>
                 /idgenerators/*/ids
             </resourceName>
@@ -1391,22 +1631,22 @@
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>a2e2bacb-4d4e-4f82-91c7-e57447bd9799</permissionId>
+            <permissionId>5055f9c0-0277-47e6-9874-8fa3565a95c4</permissionId>
             <resourceName>collectionobjects</resourceName>
         </permission>
         <role>
-            <roleId>b6af2c74-4238-44e1-b7c5-12b9a262a39e</roleId>
+            <roleId>45c752ca-75aa-4801-a65e-5b85119e4dde</roleId>
             <roleName>ROLE_TENANT_ADMINISTRATOR</roleName>
         </role>
         <role>
-            <roleId>9e848daa-2b35-444a-871b-95c9b998ed76</roleId>
+            <roleId>b5c798e6-3c1c-4c86-b9e0-40a5717bb084</roleId>
             <roleName>ROLE_TENANT_ADMINISTRATOR</roleName>
         </role>
     </permissionRole>
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>a2e2bacb-4d4e-4f82-91c7-e57447bd9799</permissionId>
+            <permissionId>5055f9c0-0277-47e6-9874-8fa3565a95c4</permissionId>
             <resourceName>collectionobjects</resourceName>
         </permission>
         <role>
@@ -1417,24 +1657,24 @@
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>1c37144c-94c2-427f-bc42-e85e402ed548</permissionId>
+            <permissionId>b1e05df7-328d-4afe-92ff-d44a4bf50ab7</permissionId>
             <resourceName>
                 /collectionobjects/*/authorityrefs/
             </resourceName>
         </permission>
         <role>
-            <roleId>b6af2c74-4238-44e1-b7c5-12b9a262a39e</roleId>
+            <roleId>45c752ca-75aa-4801-a65e-5b85119e4dde</roleId>
             <roleName>ROLE_TENANT_ADMINISTRATOR</roleName>
         </role>
         <role>
-            <roleId>9e848daa-2b35-444a-871b-95c9b998ed76</roleId>
+            <roleId>b5c798e6-3c1c-4c86-b9e0-40a5717bb084</roleId>
             <roleName>ROLE_TENANT_ADMINISTRATOR</roleName>
         </role>
     </permissionRole>
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>1c37144c-94c2-427f-bc42-e85e402ed548</permissionId>
+            <permissionId>b1e05df7-328d-4afe-92ff-d44a4bf50ab7</permissionId>
             <resourceName>
                 /collectionobjects/*/authorityrefs/
             </resourceName>
@@ -1447,22 +1687,22 @@
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>e337aac3-f491-4e12-bf8a-191e710bcf39</permissionId>
+            <permissionId>cf220409-e37f-4972-adff-79ee4fca7791</permissionId>
             <resourceName>intakes</resourceName>
         </permission>
         <role>
-            <roleId>b6af2c74-4238-44e1-b7c5-12b9a262a39e</roleId>
+            <roleId>45c752ca-75aa-4801-a65e-5b85119e4dde</roleId>
             <roleName>ROLE_TENANT_ADMINISTRATOR</roleName>
         </role>
         <role>
-            <roleId>9e848daa-2b35-444a-871b-95c9b998ed76</roleId>
+            <roleId>b5c798e6-3c1c-4c86-b9e0-40a5717bb084</roleId>
             <roleName>ROLE_TENANT_ADMINISTRATOR</roleName>
         </role>
     </permissionRole>
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>e337aac3-f491-4e12-bf8a-191e710bcf39</permissionId>
+            <permissionId>cf220409-e37f-4972-adff-79ee4fca7791</permissionId>
             <resourceName>intakes</resourceName>
         </permission>
         <role>
@@ -1473,24 +1713,24 @@
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>9b82bb67-5ad4-4ecd-a127-290dfda83e7e</permissionId>
+            <permissionId>1cd45b9b-5114-47f5-8507-913c5643d9db</permissionId>
             <resourceName>
                 /intakes/*/authorityrefs/
             </resourceName>
         </permission>
         <role>
-            <roleId>b6af2c74-4238-44e1-b7c5-12b9a262a39e</roleId>
+            <roleId>45c752ca-75aa-4801-a65e-5b85119e4dde</roleId>
             <roleName>ROLE_TENANT_ADMINISTRATOR</roleName>
         </role>
         <role>
-            <roleId>9e848daa-2b35-444a-871b-95c9b998ed76</roleId>
+            <roleId>b5c798e6-3c1c-4c86-b9e0-40a5717bb084</roleId>
             <roleName>ROLE_TENANT_ADMINISTRATOR</roleName>
         </role>
     </permissionRole>
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>9b82bb67-5ad4-4ecd-a127-290dfda83e7e</permissionId>
+            <permissionId>1cd45b9b-5114-47f5-8507-913c5643d9db</permissionId>
             <resourceName>
                 /intakes/*/authorityrefs/
             </resourceName>
@@ -1503,22 +1743,22 @@
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>d6fe2371-3327-4703-a1ea-d7cbed4494a8</permissionId>
+            <permissionId>e45486cf-f662-4df3-9861-0f9e4f6b0e93</permissionId>
             <resourceName>loansin</resourceName>
         </permission>
         <role>
-            <roleId>b6af2c74-4238-44e1-b7c5-12b9a262a39e</roleId>
+            <roleId>45c752ca-75aa-4801-a65e-5b85119e4dde</roleId>
             <roleName>ROLE_TENANT_ADMINISTRATOR</roleName>
         </role>
         <role>
-            <roleId>9e848daa-2b35-444a-871b-95c9b998ed76</roleId>
+            <roleId>b5c798e6-3c1c-4c86-b9e0-40a5717bb084</roleId>
             <roleName>ROLE_TENANT_ADMINISTRATOR</roleName>
         </role>
     </permissionRole>
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>d6fe2371-3327-4703-a1ea-d7cbed4494a8</permissionId>
+            <permissionId>e45486cf-f662-4df3-9861-0f9e4f6b0e93</permissionId>
             <resourceName>loansin</resourceName>
         </permission>
         <role>
@@ -1529,24 +1769,24 @@
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>048bad2c-bfbb-4a1b-bf83-cfdb37669b97</permissionId>
+            <permissionId>c229d5c6-0511-4cca-966d-eee83aa7bbbd</permissionId>
             <resourceName>
                 /loansin/*/authorityrefs/
             </resourceName>
         </permission>
         <role>
-            <roleId>b6af2c74-4238-44e1-b7c5-12b9a262a39e</roleId>
+            <roleId>45c752ca-75aa-4801-a65e-5b85119e4dde</roleId>
             <roleName>ROLE_TENANT_ADMINISTRATOR</roleName>
         </role>
         <role>
-            <roleId>9e848daa-2b35-444a-871b-95c9b998ed76</roleId>
+            <roleId>b5c798e6-3c1c-4c86-b9e0-40a5717bb084</roleId>
             <roleName>ROLE_TENANT_ADMINISTRATOR</roleName>
         </role>
     </permissionRole>
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>048bad2c-bfbb-4a1b-bf83-cfdb37669b97</permissionId>
+            <permissionId>c229d5c6-0511-4cca-966d-eee83aa7bbbd</permissionId>
             <resourceName>
                 /loansin/*/authorityrefs/
             </resourceName>
@@ -1559,22 +1799,22 @@
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>a5d24649-2028-4b52-8125-9ebf6faf23a6</permissionId>
+            <permissionId>7c43786e-6435-4d44-a9e9-22fa35ef0b65</permissionId>
             <resourceName>loansout</resourceName>
         </permission>
         <role>
-            <roleId>b6af2c74-4238-44e1-b7c5-12b9a262a39e</roleId>
+            <roleId>45c752ca-75aa-4801-a65e-5b85119e4dde</roleId>
             <roleName>ROLE_TENANT_ADMINISTRATOR</roleName>
         </role>
         <role>
-            <roleId>9e848daa-2b35-444a-871b-95c9b998ed76</roleId>
+            <roleId>b5c798e6-3c1c-4c86-b9e0-40a5717bb084</roleId>
             <roleName>ROLE_TENANT_ADMINISTRATOR</roleName>
         </role>
     </permissionRole>
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>a5d24649-2028-4b52-8125-9ebf6faf23a6</permissionId>
+            <permissionId>7c43786e-6435-4d44-a9e9-22fa35ef0b65</permissionId>
             <resourceName>loansout</resourceName>
         </permission>
         <role>
@@ -1585,24 +1825,24 @@
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>200637f0-3e8b-491f-ab70-be77de4c930a</permissionId>
+            <permissionId>bdf664c8-5bfb-45a0-a012-d6e1d40ce472</permissionId>
             <resourceName>
                 /loansout/*/authorityrefs/
             </resourceName>
         </permission>
         <role>
-            <roleId>b6af2c74-4238-44e1-b7c5-12b9a262a39e</roleId>
+            <roleId>45c752ca-75aa-4801-a65e-5b85119e4dde</roleId>
             <roleName>ROLE_TENANT_ADMINISTRATOR</roleName>
         </role>
         <role>
-            <roleId>9e848daa-2b35-444a-871b-95c9b998ed76</roleId>
+            <roleId>b5c798e6-3c1c-4c86-b9e0-40a5717bb084</roleId>
             <roleName>ROLE_TENANT_ADMINISTRATOR</roleName>
         </role>
     </permissionRole>
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>200637f0-3e8b-491f-ab70-be77de4c930a</permissionId>
+            <permissionId>bdf664c8-5bfb-45a0-a012-d6e1d40ce472</permissionId>
             <resourceName>
                 /loansout/*/authorityrefs/
             </resourceName>
@@ -1615,22 +1855,22 @@
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>d4bb0bb9-bb44-4421-992e-328b272458ed</permissionId>
+            <permissionId>c9a28631-bf84-4b41-a2f9-4095cd412bae</permissionId>
             <resourceName>movements</resourceName>
         </permission>
         <role>
-            <roleId>b6af2c74-4238-44e1-b7c5-12b9a262a39e</roleId>
+            <roleId>45c752ca-75aa-4801-a65e-5b85119e4dde</roleId>
             <roleName>ROLE_TENANT_ADMINISTRATOR</roleName>
         </role>
         <role>
-            <roleId>9e848daa-2b35-444a-871b-95c9b998ed76</roleId>
+            <roleId>b5c798e6-3c1c-4c86-b9e0-40a5717bb084</roleId>
             <roleName>ROLE_TENANT_ADMINISTRATOR</roleName>
         </role>
     </permissionRole>
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>d4bb0bb9-bb44-4421-992e-328b272458ed</permissionId>
+            <permissionId>c9a28631-bf84-4b41-a2f9-4095cd412bae</permissionId>
             <resourceName>movements</resourceName>
         </permission>
         <role>
@@ -1641,24 +1881,24 @@
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>be88af98-a0fc-4d20-a2b8-8d513a16e72f</permissionId>
+            <permissionId>46e6d8a7-91ef-4cd6-901a-daec5fe39f02</permissionId>
             <resourceName>
                 /movements/*/authorityrefs/
             </resourceName>
         </permission>
         <role>
-            <roleId>b6af2c74-4238-44e1-b7c5-12b9a262a39e</roleId>
+            <roleId>45c752ca-75aa-4801-a65e-5b85119e4dde</roleId>
             <roleName>ROLE_TENANT_ADMINISTRATOR</roleName>
         </role>
         <role>
-            <roleId>9e848daa-2b35-444a-871b-95c9b998ed76</roleId>
+            <roleId>b5c798e6-3c1c-4c86-b9e0-40a5717bb084</roleId>
             <roleName>ROLE_TENANT_ADMINISTRATOR</roleName>
         </role>
     </permissionRole>
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>be88af98-a0fc-4d20-a2b8-8d513a16e72f</permissionId>
+            <permissionId>46e6d8a7-91ef-4cd6-901a-daec5fe39f02</permissionId>
             <resourceName>
                 /movements/*/authorityrefs/
             </resourceName>
@@ -1671,22 +1911,22 @@
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>8d20c65c-9431-43f5-8363-cff22f3f1636</permissionId>
+            <permissionId>a18a82b9-f505-418a-afb6-388c4370d129</permissionId>
             <resourceName>vocabularies</resourceName>
         </permission>
         <role>
-            <roleId>b6af2c74-4238-44e1-b7c5-12b9a262a39e</roleId>
+            <roleId>45c752ca-75aa-4801-a65e-5b85119e4dde</roleId>
             <roleName>ROLE_TENANT_ADMINISTRATOR</roleName>
         </role>
         <role>
-            <roleId>9e848daa-2b35-444a-871b-95c9b998ed76</roleId>
+            <roleId>b5c798e6-3c1c-4c86-b9e0-40a5717bb084</roleId>
             <roleName>ROLE_TENANT_ADMINISTRATOR</roleName>
         </role>
     </permissionRole>
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>8d20c65c-9431-43f5-8363-cff22f3f1636</permissionId>
+            <permissionId>a18a82b9-f505-418a-afb6-388c4370d129</permissionId>
             <resourceName>vocabularies</resourceName>
         </permission>
         <role>
@@ -1697,22 +1937,22 @@
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>baae576a-0002-4c7e-8f81-6b8b4de4e446</permissionId>
+            <permissionId>0354b057-3cd7-4ff5-8fa3-8d746d490a58</permissionId>
             <resourceName>vocabularyitems</resourceName>
         </permission>
         <role>
-            <roleId>b6af2c74-4238-44e1-b7c5-12b9a262a39e</roleId>
+            <roleId>45c752ca-75aa-4801-a65e-5b85119e4dde</roleId>
             <roleName>ROLE_TENANT_ADMINISTRATOR</roleName>
         </role>
         <role>
-            <roleId>9e848daa-2b35-444a-871b-95c9b998ed76</roleId>
+            <roleId>b5c798e6-3c1c-4c86-b9e0-40a5717bb084</roleId>
             <roleName>ROLE_TENANT_ADMINISTRATOR</roleName>
         </role>
     </permissionRole>
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>baae576a-0002-4c7e-8f81-6b8b4de4e446</permissionId>
+            <permissionId>0354b057-3cd7-4ff5-8fa3-8d746d490a58</permissionId>
             <resourceName>vocabularyitems</resourceName>
         </permission>
         <role>
@@ -1723,24 +1963,24 @@
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>0a23b37e-7f61-4b7a-8675-6d5861f4cd70</permissionId>
+            <permissionId>e36dfe3e-e143-47d4-9d13-184acd5d81a5</permissionId>
             <resourceName>
                 /vocabularies/*/items/
             </resourceName>
         </permission>
         <role>
-            <roleId>b6af2c74-4238-44e1-b7c5-12b9a262a39e</roleId>
+            <roleId>45c752ca-75aa-4801-a65e-5b85119e4dde</roleId>
             <roleName>ROLE_TENANT_ADMINISTRATOR</roleName>
         </role>
         <role>
-            <roleId>9e848daa-2b35-444a-871b-95c9b998ed76</roleId>
+            <roleId>b5c798e6-3c1c-4c86-b9e0-40a5717bb084</roleId>
             <roleName>ROLE_TENANT_ADMINISTRATOR</roleName>
         </role>
     </permissionRole>
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>0a23b37e-7f61-4b7a-8675-6d5861f4cd70</permissionId>
+            <permissionId>e36dfe3e-e143-47d4-9d13-184acd5d81a5</permissionId>
             <resourceName>
                 /vocabularies/*/items/
             </resourceName>
@@ -1753,22 +1993,22 @@
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>7ef5a389-13fd-4560-9c53-d4016d28fcc7</permissionId>
+            <permissionId>dd310d56-6e70-43e9-81d8-af61fad5a761</permissionId>
             <resourceName>orgauthorities</resourceName>
         </permission>
         <role>
-            <roleId>b6af2c74-4238-44e1-b7c5-12b9a262a39e</roleId>
+            <roleId>45c752ca-75aa-4801-a65e-5b85119e4dde</roleId>
             <roleName>ROLE_TENANT_ADMINISTRATOR</roleName>
         </role>
         <role>
-            <roleId>9e848daa-2b35-444a-871b-95c9b998ed76</roleId>
+            <roleId>b5c798e6-3c1c-4c86-b9e0-40a5717bb084</roleId>
             <roleName>ROLE_TENANT_ADMINISTRATOR</roleName>
         </role>
     </permissionRole>
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>7ef5a389-13fd-4560-9c53-d4016d28fcc7</permissionId>
+            <permissionId>dd310d56-6e70-43e9-81d8-af61fad5a761</permissionId>
             <resourceName>orgauthorities</resourceName>
         </permission>
         <role>
@@ -1779,24 +2019,24 @@
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>a9378d8e-326b-455e-a6f5-c63b3edcb22c</permissionId>
+            <permissionId>6b903a0b-658b-41ac-9881-5e280c47740d</permissionId>
             <resourceName>
                 /orgauthorities/*/items/*/authorityrefs/
             </resourceName>
         </permission>
         <role>
-            <roleId>b6af2c74-4238-44e1-b7c5-12b9a262a39e</roleId>
+            <roleId>45c752ca-75aa-4801-a65e-5b85119e4dde</roleId>
             <roleName>ROLE_TENANT_ADMINISTRATOR</roleName>
         </role>
         <role>
-            <roleId>9e848daa-2b35-444a-871b-95c9b998ed76</roleId>
+            <roleId>b5c798e6-3c1c-4c86-b9e0-40a5717bb084</roleId>
             <roleName>ROLE_TENANT_ADMINISTRATOR</roleName>
         </role>
     </permissionRole>
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>a9378d8e-326b-455e-a6f5-c63b3edcb22c</permissionId>
+            <permissionId>6b903a0b-658b-41ac-9881-5e280c47740d</permissionId>
             <resourceName>
                 /orgauthorities/*/items/*/authorityrefs/
             </resourceName>
@@ -1809,22 +2049,22 @@
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>018c53e5-d25f-4c1b-bf63-2b0a0bc8e8cb</permissionId>
+            <permissionId>43681ada-4538-48a2-8774-f4135b90af93</permissionId>
             <resourceName>organizations</resourceName>
         </permission>
         <role>
-            <roleId>b6af2c74-4238-44e1-b7c5-12b9a262a39e</roleId>
+            <roleId>45c752ca-75aa-4801-a65e-5b85119e4dde</roleId>
             <roleName>ROLE_TENANT_ADMINISTRATOR</roleName>
         </role>
         <role>
-            <roleId>9e848daa-2b35-444a-871b-95c9b998ed76</roleId>
+            <roleId>b5c798e6-3c1c-4c86-b9e0-40a5717bb084</roleId>
             <roleName>ROLE_TENANT_ADMINISTRATOR</roleName>
         </role>
     </permissionRole>
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>018c53e5-d25f-4c1b-bf63-2b0a0bc8e8cb</permissionId>
+            <permissionId>43681ada-4538-48a2-8774-f4135b90af93</permissionId>
             <resourceName>organizations</resourceName>
         </permission>
         <role>
@@ -1835,24 +2075,24 @@
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>c7a00064-ca3e-4f13-a5e1-22d4fba1bf0a</permissionId>
+            <permissionId>f1b47a46-4e44-44ca-9414-310fade8252e</permissionId>
             <resourceName>
                 /orgauthorities/*/items/
             </resourceName>
         </permission>
         <role>
-            <roleId>b6af2c74-4238-44e1-b7c5-12b9a262a39e</roleId>
+            <roleId>45c752ca-75aa-4801-a65e-5b85119e4dde</roleId>
             <roleName>ROLE_TENANT_ADMINISTRATOR</roleName>
         </role>
         <role>
-            <roleId>9e848daa-2b35-444a-871b-95c9b998ed76</roleId>
+            <roleId>b5c798e6-3c1c-4c86-b9e0-40a5717bb084</roleId>
             <roleName>ROLE_TENANT_ADMINISTRATOR</roleName>
         </role>
     </permissionRole>
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>c7a00064-ca3e-4f13-a5e1-22d4fba1bf0a</permissionId>
+            <permissionId>f1b47a46-4e44-44ca-9414-310fade8252e</permissionId>
             <resourceName>
                 /orgauthorities/*/items/
             </resourceName>
@@ -1865,24 +2105,24 @@
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>9b8bd457-f8e6-408c-b9eb-dd67e4c278c2</permissionId>
+            <permissionId>9c6d48e9-4198-4ff5-9726-9fcab6be300b</permissionId>
             <resourceName>
                 /orgauthorities/*/items/*/refobjs
             </resourceName>
         </permission>
         <role>
-            <roleId>b6af2c74-4238-44e1-b7c5-12b9a262a39e</roleId>
+            <roleId>45c752ca-75aa-4801-a65e-5b85119e4dde</roleId>
             <roleName>ROLE_TENANT_ADMINISTRATOR</roleName>
         </role>
         <role>
-            <roleId>9e848daa-2b35-444a-871b-95c9b998ed76</roleId>
+            <roleId>b5c798e6-3c1c-4c86-b9e0-40a5717bb084</roleId>
             <roleName>ROLE_TENANT_ADMINISTRATOR</roleName>
         </role>
     </permissionRole>
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>9b8bd457-f8e6-408c-b9eb-dd67e4c278c2</permissionId>
+            <permissionId>9c6d48e9-4198-4ff5-9726-9fcab6be300b</permissionId>
             <resourceName>
                 /orgauthorities/*/items/*/refobjs
             </resourceName>
@@ -1895,22 +2135,22 @@
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>97c0948d-fb9e-49d7-b748-86635a21c313</permissionId>
+            <permissionId>a17f6316-f5ba-4c74-8f69-397d4e01a7e4</permissionId>
             <resourceName>personauthorities</resourceName>
         </permission>
         <role>
-            <roleId>b6af2c74-4238-44e1-b7c5-12b9a262a39e</roleId>
+            <roleId>45c752ca-75aa-4801-a65e-5b85119e4dde</roleId>
             <roleName>ROLE_TENANT_ADMINISTRATOR</roleName>
         </role>
         <role>
-            <roleId>9e848daa-2b35-444a-871b-95c9b998ed76</roleId>
+            <roleId>b5c798e6-3c1c-4c86-b9e0-40a5717bb084</roleId>
             <roleName>ROLE_TENANT_ADMINISTRATOR</roleName>
         </role>
     </permissionRole>
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>97c0948d-fb9e-49d7-b748-86635a21c313</permissionId>
+            <permissionId>a17f6316-f5ba-4c74-8f69-397d4e01a7e4</permissionId>
             <resourceName>personauthorities</resourceName>
         </permission>
         <role>
@@ -1921,26 +2161,250 @@
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>23d29e66-624e-4d57-8f94-e26e05747cee</permissionId>
+            <permissionId>2b1147d4-9a6a-4197-8e2d-0fae113dc14a</permissionId>
+            <resourceName>
+                /personauthorities/*/items/
+            </resourceName>
+        </permission>
+        <role>
+            <roleId>45c752ca-75aa-4801-a65e-5b85119e4dde</roleId>
+            <roleName>ROLE_TENANT_ADMINISTRATOR</roleName>
+        </role>
+        <role>
+            <roleId>b5c798e6-3c1c-4c86-b9e0-40a5717bb084</roleId>
+            <roleName>ROLE_TENANT_ADMINISTRATOR</roleName>
+        </role>
+    </permissionRole>
+    <permissionRole>
+        <subject>ROLE</subject>
+        <permission>
+            <permissionId>2b1147d4-9a6a-4197-8e2d-0fae113dc14a</permissionId>
+            <resourceName>
+                /personauthorities/*/items/
+            </resourceName>
+        </permission>
+        <role>
+            <roleId>0</roleId>
+            <roleName>ROLE_ADMINISTRATOR</roleName>
+        </role>
+    </permissionRole>
+    <permissionRole>
+        <subject>ROLE</subject>
+        <permission>
+            <permissionId>14b2f195-833f-4697-8517-fcdd7a98cd2c</permissionId>
+            <resourceName>
+                /personauthorities/*/items/*/refobjs
+            </resourceName>
+        </permission>
+        <role>
+            <roleId>45c752ca-75aa-4801-a65e-5b85119e4dde</roleId>
+            <roleName>ROLE_TENANT_ADMINISTRATOR</roleName>
+        </role>
+        <role>
+            <roleId>b5c798e6-3c1c-4c86-b9e0-40a5717bb084</roleId>
+            <roleName>ROLE_TENANT_ADMINISTRATOR</roleName>
+        </role>
+    </permissionRole>
+    <permissionRole>
+        <subject>ROLE</subject>
+        <permission>
+            <permissionId>14b2f195-833f-4697-8517-fcdd7a98cd2c</permissionId>
+            <resourceName>
+                /personauthorities/*/items/*/refobjs
+            </resourceName>
+        </permission>
+        <role>
+            <roleId>0</roleId>
+            <roleName>ROLE_ADMINISTRATOR</roleName>
+        </role>
+    </permissionRole>
+    <permissionRole>
+        <subject>ROLE</subject>
+        <permission>
+            <permissionId>16470305-fd33-4ab4-bc71-64408b0a87f7</permissionId>
+            <resourceName>persons</resourceName>
+        </permission>
+        <role>
+            <roleId>45c752ca-75aa-4801-a65e-5b85119e4dde</roleId>
+            <roleName>ROLE_TENANT_ADMINISTRATOR</roleName>
+        </role>
+        <role>
+            <roleId>b5c798e6-3c1c-4c86-b9e0-40a5717bb084</roleId>
+            <roleName>ROLE_TENANT_ADMINISTRATOR</roleName>
+        </role>
+    </permissionRole>
+    <permissionRole>
+        <subject>ROLE</subject>
+        <permission>
+            <permissionId>16470305-fd33-4ab4-bc71-64408b0a87f7</permissionId>
+            <resourceName>persons</resourceName>
+        </permission>
+        <role>
+            <roleId>0</roleId>
+            <roleName>ROLE_ADMINISTRATOR</roleName>
+        </role>
+    </permissionRole>
+    <permissionRole>
+        <subject>ROLE</subject>
+        <permission>
+            <permissionId>0d2d4594-e913-4948-871b-7ee07db7417d</permissionId>
+            <resourceName>
+                /personauthorities/*/items/
+            </resourceName>
+        </permission>
+        <role>
+            <roleId>45c752ca-75aa-4801-a65e-5b85119e4dde</roleId>
+            <roleName>ROLE_TENANT_ADMINISTRATOR</roleName>
+        </role>
+        <role>
+            <roleId>b5c798e6-3c1c-4c86-b9e0-40a5717bb084</roleId>
+            <roleName>ROLE_TENANT_ADMINISTRATOR</roleName>
+        </role>
+    </permissionRole>
+    <permissionRole>
+        <subject>ROLE</subject>
+        <permission>
+            <permissionId>0d2d4594-e913-4948-871b-7ee07db7417d</permissionId>
+            <resourceName>
+                /personauthorities/*/items/
+            </resourceName>
+        </permission>
+        <role>
+            <roleId>0</roleId>
+            <roleName>ROLE_ADMINISTRATOR</roleName>
+        </role>
+    </permissionRole>
+    <permissionRole>
+        <subject>ROLE</subject>
+        <permission>
+            <permissionId>b6fd9d4c-b6b2-4bb1-9826-104d409996e6</permissionId>
+            <resourceName>locationauthorities</resourceName>
+        </permission>
+        <role>
+            <roleId>45c752ca-75aa-4801-a65e-5b85119e4dde</roleId>
+            <roleName>ROLE_TENANT_ADMINISTRATOR</roleName>
+        </role>
+        <role>
+            <roleId>b5c798e6-3c1c-4c86-b9e0-40a5717bb084</roleId>
+            <roleName>ROLE_TENANT_ADMINISTRATOR</roleName>
+        </role>
+    </permissionRole>
+    <permissionRole>
+        <subject>ROLE</subject>
+        <permission>
+            <permissionId>b6fd9d4c-b6b2-4bb1-9826-104d409996e6</permissionId>
+            <resourceName>locationauthorities</resourceName>
+        </permission>
+        <role>
+            <roleId>0</roleId>
+            <roleName>ROLE_ADMINISTRATOR</roleName>
+        </role>
+    </permissionRole>
+    <permissionRole>
+        <subject>ROLE</subject>
+        <permission>
+            <permissionId>b29dc31a-6ca8-4235-968e-b3e7586c490d</permissionId>
+            <resourceName>
+                /locationauthorities/*/items/
+            </resourceName>
+        </permission>
+        <role>
+            <roleId>45c752ca-75aa-4801-a65e-5b85119e4dde</roleId>
+            <roleName>ROLE_TENANT_ADMINISTRATOR</roleName>
+        </role>
+        <role>
+            <roleId>b5c798e6-3c1c-4c86-b9e0-40a5717bb084</roleId>
+            <roleName>ROLE_TENANT_ADMINISTRATOR</roleName>
+        </role>
+    </permissionRole>
+    <permissionRole>
+        <subject>ROLE</subject>
+        <permission>
+            <permissionId>b29dc31a-6ca8-4235-968e-b3e7586c490d</permissionId>
+            <resourceName>
+                /locationauthorities/*/items/
+            </resourceName>
+        </permission>
+        <role>
+            <roleId>0</roleId>
+            <roleName>ROLE_ADMINISTRATOR</roleName>
+        </role>
+    </permissionRole>
+    <permissionRole>
+        <subject>ROLE</subject>
+        <permission>
+            <permissionId>80dbadab-228a-4058-8239-e3d12102e7ed</permissionId>
+            <resourceName>locations</resourceName>
+        </permission>
+        <role>
+            <roleId>45c752ca-75aa-4801-a65e-5b85119e4dde</roleId>
+            <roleName>ROLE_TENANT_ADMINISTRATOR</roleName>
+        </role>
+        <role>
+            <roleId>b5c798e6-3c1c-4c86-b9e0-40a5717bb084</roleId>
+            <roleName>ROLE_TENANT_ADMINISTRATOR</roleName>
+        </role>
+    </permissionRole>
+    <permissionRole>
+        <subject>ROLE</subject>
+        <permission>
+            <permissionId>80dbadab-228a-4058-8239-e3d12102e7ed</permissionId>
+            <resourceName>locations</resourceName>
+        </permission>
+        <role>
+            <roleId>0</roleId>
+            <roleName>ROLE_ADMINISTRATOR</roleName>
+        </role>
+    </permissionRole>
+    <permissionRole>
+        <subject>ROLE</subject>
+        <permission>
+            <permissionId>a66de87b-ec2b-4b47-b3e5-2f0462475371</permissionId>
+            <resourceName>acquisitions</resourceName>
+        </permission>
+        <role>
+            <roleId>45c752ca-75aa-4801-a65e-5b85119e4dde</roleId>
+            <roleName>ROLE_TENANT_ADMINISTRATOR</roleName>
+        </role>
+        <role>
+            <roleId>b5c798e6-3c1c-4c86-b9e0-40a5717bb084</roleId>
+            <roleName>ROLE_TENANT_ADMINISTRATOR</roleName>
+        </role>
+    </permissionRole>
+    <permissionRole>
+        <subject>ROLE</subject>
+        <permission>
+            <permissionId>a66de87b-ec2b-4b47-b3e5-2f0462475371</permissionId>
+            <resourceName>acquisitions</resourceName>
+        </permission>
+        <role>
+            <roleId>0</roleId>
+            <roleName>ROLE_ADMINISTRATOR</roleName>
+        </role>
+    </permissionRole>
+    <permissionRole>
+        <subject>ROLE</subject>
+        <permission>
+            <permissionId>1e611f11-1ba6-4e35-9ded-24cbaaf23ca7</permissionId>
             <resourceName>
-                /personauthorities/*/items/
+                /acquisitions/*/authorityrefs/
             </resourceName>
         </permission>
         <role>
-            <roleId>b6af2c74-4238-44e1-b7c5-12b9a262a39e</roleId>
+            <roleId>45c752ca-75aa-4801-a65e-5b85119e4dde</roleId>
             <roleName>ROLE_TENANT_ADMINISTRATOR</roleName>
         </role>
         <role>
-            <roleId>9e848daa-2b35-444a-871b-95c9b998ed76</roleId>
+            <roleId>b5c798e6-3c1c-4c86-b9e0-40a5717bb084</roleId>
             <roleName>ROLE_TENANT_ADMINISTRATOR</roleName>
         </role>
     </permissionRole>
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>23d29e66-624e-4d57-8f94-e26e05747cee</permissionId>
+            <permissionId>1e611f11-1ba6-4e35-9ded-24cbaaf23ca7</permissionId>
             <resourceName>
-                /personauthorities/*/items/
+                /acquisitions/*/authorityrefs/
             </resourceName>
         </permission>
         <role>
@@ -1951,27 +2415,23 @@
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>4b755790-bc41-4495-aa3f-a523427c0a60</permissionId>
-            <resourceName>
-                /personauthorities/*/items/*/refobjs
-            </resourceName>
+            <permissionId>f6a3b97c-9993-4598-a5df-3767ea578570</permissionId>
+            <resourceName>relations</resourceName>
         </permission>
         <role>
-            <roleId>b6af2c74-4238-44e1-b7c5-12b9a262a39e</roleId>
+            <roleId>45c752ca-75aa-4801-a65e-5b85119e4dde</roleId>
             <roleName>ROLE_TENANT_ADMINISTRATOR</roleName>
         </role>
         <role>
-            <roleId>9e848daa-2b35-444a-871b-95c9b998ed76</roleId>
+            <roleId>b5c798e6-3c1c-4c86-b9e0-40a5717bb084</roleId>
             <roleName>ROLE_TENANT_ADMINISTRATOR</roleName>
         </role>
     </permissionRole>
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>4b755790-bc41-4495-aa3f-a523427c0a60</permissionId>
-            <resourceName>
-                /personauthorities/*/items/*/refobjs
-            </resourceName>
+            <permissionId>f6a3b97c-9993-4598-a5df-3767ea578570</permissionId>
+            <resourceName>relations</resourceName>
         </permission>
         <role>
             <roleId>0</roleId>
@@ -1981,23 +2441,27 @@
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>04f61718-653c-4d87-a0e6-9de5b7bbf34a</permissionId>
-            <resourceName>persons</resourceName>
+            <permissionId>3dbe2cfa-c07a-4b31-97f8-fc1b4ed64616</permissionId>
+            <resourceName>
+                /relations/object/*
+            </resourceName>
         </permission>
         <role>
-            <roleId>b6af2c74-4238-44e1-b7c5-12b9a262a39e</roleId>
+            <roleId>45c752ca-75aa-4801-a65e-5b85119e4dde</roleId>
             <roleName>ROLE_TENANT_ADMINISTRATOR</roleName>
         </role>
         <role>
-            <roleId>9e848daa-2b35-444a-871b-95c9b998ed76</roleId>
+            <roleId>b5c798e6-3c1c-4c86-b9e0-40a5717bb084</roleId>
             <roleName>ROLE_TENANT_ADMINISTRATOR</roleName>
         </role>
     </permissionRole>
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>04f61718-653c-4d87-a0e6-9de5b7bbf34a</permissionId>
-            <resourceName>persons</resourceName>
+            <permissionId>3dbe2cfa-c07a-4b31-97f8-fc1b4ed64616</permissionId>
+            <resourceName>
+                /relations/object/*
+            </resourceName>
         </permission>
         <role>
             <roleId>0</roleId>
@@ -2007,26 +2471,26 @@
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>a3a7c934-e6f5-42b2-bf6c-838cda7aed4c</permissionId>
+            <permissionId>cb8cdae5-d4fb-4bd2-9258-4fd52ec2a06f</permissionId>
             <resourceName>
-                /personauthorities/*/items/
+                /relations/object/*/type/*
             </resourceName>
         </permission>
         <role>
-            <roleId>b6af2c74-4238-44e1-b7c5-12b9a262a39e</roleId>
+            <roleId>45c752ca-75aa-4801-a65e-5b85119e4dde</roleId>
             <roleName>ROLE_TENANT_ADMINISTRATOR</roleName>
         </role>
         <role>
-            <roleId>9e848daa-2b35-444a-871b-95c9b998ed76</roleId>
+            <roleId>b5c798e6-3c1c-4c86-b9e0-40a5717bb084</roleId>
             <roleName>ROLE_TENANT_ADMINISTRATOR</roleName>
         </role>
     </permissionRole>
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>a3a7c934-e6f5-42b2-bf6c-838cda7aed4c</permissionId>
+            <permissionId>cb8cdae5-d4fb-4bd2-9258-4fd52ec2a06f</permissionId>
             <resourceName>
-                /personauthorities/*/items/
+                /relations/object/*/type/*
             </resourceName>
         </permission>
         <role>
@@ -2037,23 +2501,27 @@
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>6afe06d3-1063-4d8d-859d-6e2aac48aeed</permissionId>
-            <resourceName>locationauthorities</resourceName>
+            <permissionId>74d36c96-b826-46a9-b19b-8b717c27551e</permissionId>
+            <resourceName>
+                /relations/subject/*
+            </resourceName>
         </permission>
         <role>
-            <roleId>b6af2c74-4238-44e1-b7c5-12b9a262a39e</roleId>
+            <roleId>45c752ca-75aa-4801-a65e-5b85119e4dde</roleId>
             <roleName>ROLE_TENANT_ADMINISTRATOR</roleName>
         </role>
         <role>
-            <roleId>9e848daa-2b35-444a-871b-95c9b998ed76</roleId>
+            <roleId>b5c798e6-3c1c-4c86-b9e0-40a5717bb084</roleId>
             <roleName>ROLE_TENANT_ADMINISTRATOR</roleName>
         </role>
     </permissionRole>
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>6afe06d3-1063-4d8d-859d-6e2aac48aeed</permissionId>
-            <resourceName>locationauthorities</resourceName>
+            <permissionId>74d36c96-b826-46a9-b19b-8b717c27551e</permissionId>
+            <resourceName>
+                /relations/subject/*
+            </resourceName>
         </permission>
         <role>
             <roleId>0</roleId>
@@ -2063,26 +2531,26 @@
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>5adb375f-343a-428d-9fc3-6fc57214cc46</permissionId>
+            <permissionId>cb2eec62-1160-4103-86a0-1d65d87954c3</permissionId>
             <resourceName>
-                /locationauthorities/*/items/
+                /relations/subject/*/type/*
             </resourceName>
         </permission>
         <role>
-            <roleId>b6af2c74-4238-44e1-b7c5-12b9a262a39e</roleId>
+            <roleId>45c752ca-75aa-4801-a65e-5b85119e4dde</roleId>
             <roleName>ROLE_TENANT_ADMINISTRATOR</roleName>
         </role>
         <role>
-            <roleId>9e848daa-2b35-444a-871b-95c9b998ed76</roleId>
+            <roleId>b5c798e6-3c1c-4c86-b9e0-40a5717bb084</roleId>
             <roleName>ROLE_TENANT_ADMINISTRATOR</roleName>
         </role>
     </permissionRole>
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>5adb375f-343a-428d-9fc3-6fc57214cc46</permissionId>
+            <permissionId>cb2eec62-1160-4103-86a0-1d65d87954c3</permissionId>
             <resourceName>
-                /locationauthorities/*/items/
+                /relations/subject/*/type/*
             </resourceName>
         </permission>
         <role>
@@ -2093,23 +2561,27 @@
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>4ff9d782-ff59-44f5-8c59-6ad046370177</permissionId>
-            <resourceName>locations</resourceName>
+            <permissionId>8033c19f-ae5b-43d5-a774-2b79d0fe87a8</permissionId>
+            <resourceName>
+                /relations/subject/*/type/*/object/*
+            </resourceName>
         </permission>
         <role>
-            <roleId>b6af2c74-4238-44e1-b7c5-12b9a262a39e</roleId>
+            <roleId>45c752ca-75aa-4801-a65e-5b85119e4dde</roleId>
             <roleName>ROLE_TENANT_ADMINISTRATOR</roleName>
         </role>
         <role>
-            <roleId>9e848daa-2b35-444a-871b-95c9b998ed76</roleId>
+            <roleId>b5c798e6-3c1c-4c86-b9e0-40a5717bb084</roleId>
             <roleName>ROLE_TENANT_ADMINISTRATOR</roleName>
         </role>
     </permissionRole>
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>4ff9d782-ff59-44f5-8c59-6ad046370177</permissionId>
-            <resourceName>locations</resourceName>
+            <permissionId>8033c19f-ae5b-43d5-a774-2b79d0fe87a8</permissionId>
+            <resourceName>
+                /relations/subject/*/type/*/object/*
+            </resourceName>
         </permission>
         <role>
             <roleId>0</roleId>
@@ -2119,23 +2591,27 @@
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>c7fc2c86-e755-4f8c-a1ab-5e1bc5fcf556</permissionId>
-            <resourceName>acquisitions</resourceName>
+            <permissionId>47ecf215-d9f0-4f00-ae60-43b9524f24d9</permissionId>
+            <resourceName>
+                /relations/type/*
+            </resourceName>
         </permission>
         <role>
-            <roleId>b6af2c74-4238-44e1-b7c5-12b9a262a39e</roleId>
+            <roleId>45c752ca-75aa-4801-a65e-5b85119e4dde</roleId>
             <roleName>ROLE_TENANT_ADMINISTRATOR</roleName>
         </role>
         <role>
-            <roleId>9e848daa-2b35-444a-871b-95c9b998ed76</roleId>
+            <roleId>b5c798e6-3c1c-4c86-b9e0-40a5717bb084</roleId>
             <roleName>ROLE_TENANT_ADMINISTRATOR</roleName>
         </role>
     </permissionRole>
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>c7fc2c86-e755-4f8c-a1ab-5e1bc5fcf556</permissionId>
-            <resourceName>acquisitions</resourceName>
+            <permissionId>47ecf215-d9f0-4f00-ae60-43b9524f24d9</permissionId>
+            <resourceName>
+                /relations/type/*
+            </resourceName>
         </permission>
         <role>
             <roleId>0</roleId>
@@ -2145,26 +2621,26 @@
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>41edca48-9f20-42a7-af06-7e536f1bcff1</permissionId>
+            <permissionId>01d1d644-1233-4673-8d98-7d0186379e23</permissionId>
             <resourceName>
-                /acquisitions/*/authorityrefs/
+                /relations/type/*/object/*
             </resourceName>
         </permission>
         <role>
-            <roleId>b6af2c74-4238-44e1-b7c5-12b9a262a39e</roleId>
+            <roleId>45c752ca-75aa-4801-a65e-5b85119e4dde</roleId>
             <roleName>ROLE_TENANT_ADMINISTRATOR</roleName>
         </role>
         <role>
-            <roleId>9e848daa-2b35-444a-871b-95c9b998ed76</roleId>
+            <roleId>b5c798e6-3c1c-4c86-b9e0-40a5717bb084</roleId>
             <roleName>ROLE_TENANT_ADMINISTRATOR</roleName>
         </role>
     </permissionRole>
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>41edca48-9f20-42a7-af06-7e536f1bcff1</permissionId>
+            <permissionId>01d1d644-1233-4673-8d98-7d0186379e23</permissionId>
             <resourceName>
-                /acquisitions/*/authorityrefs/
+                /relations/type/*/object/*
             </resourceName>
         </permission>
         <role>
@@ -2175,23 +2651,27 @@
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>0e642a75-309f-4354-bd30-69fa7ba319f6</permissionId>
-            <resourceName>relations</resourceName>
+            <permissionId>e475ed0c-0847-40b1-8587-a288db4cf2be</permissionId>
+            <resourceName>
+                /relations/type/*/subject/*
+            </resourceName>
         </permission>
         <role>
-            <roleId>b6af2c74-4238-44e1-b7c5-12b9a262a39e</roleId>
+            <roleId>45c752ca-75aa-4801-a65e-5b85119e4dde</roleId>
             <roleName>ROLE_TENANT_ADMINISTRATOR</roleName>
         </role>
         <role>
-            <roleId>9e848daa-2b35-444a-871b-95c9b998ed76</roleId>
+            <roleId>b5c798e6-3c1c-4c86-b9e0-40a5717bb084</roleId>
             <roleName>ROLE_TENANT_ADMINISTRATOR</roleName>
         </role>
     </permissionRole>
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>0e642a75-309f-4354-bd30-69fa7ba319f6</permissionId>
-            <resourceName>relations</resourceName>
+            <permissionId>e475ed0c-0847-40b1-8587-a288db4cf2be</permissionId>
+            <resourceName>
+                /relations/type/*/subject/*
+            </resourceName>
         </permission>
         <role>
             <roleId>0</roleId>
@@ -2201,26 +2681,26 @@
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>d94ebd08-277b-40ea-a655-c2bac9ee9af0</permissionId>
+            <permissionId>8eed5af1-ff30-4877-9405-0e8da8d35b3f</permissionId>
             <resourceName>
-                relations/subject/*/type/*/object/*
+                /relations/type/*/subject/*/object/*
             </resourceName>
         </permission>
         <role>
-            <roleId>b6af2c74-4238-44e1-b7c5-12b9a262a39e</roleId>
+            <roleId>45c752ca-75aa-4801-a65e-5b85119e4dde</roleId>
             <roleName>ROLE_TENANT_ADMINISTRATOR</roleName>
         </role>
         <role>
-            <roleId>9e848daa-2b35-444a-871b-95c9b998ed76</roleId>
+            <roleId>b5c798e6-3c1c-4c86-b9e0-40a5717bb084</roleId>
             <roleName>ROLE_TENANT_ADMINISTRATOR</roleName>
         </role>
     </permissionRole>
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>d94ebd08-277b-40ea-a655-c2bac9ee9af0</permissionId>
+            <permissionId>8eed5af1-ff30-4877-9405-0e8da8d35b3f</permissionId>
             <resourceName>
-                relations/subject/*/type/*/object/*
+                /relations/type/*/subject/*/object/*
             </resourceName>
         </permission>
         <role>
@@ -2231,22 +2711,22 @@
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>ea1d3e08-46ea-4be3-9858-a93f260999e1</permissionId>
+            <permissionId>f88aad7d-52f6-4622-9f63-37382f83caae</permissionId>
             <resourceName>accounts</resourceName>
         </permission>
         <role>
-            <roleId>b6af2c74-4238-44e1-b7c5-12b9a262a39e</roleId>
+            <roleId>45c752ca-75aa-4801-a65e-5b85119e4dde</roleId>
             <roleName>ROLE_TENANT_ADMINISTRATOR</roleName>
         </role>
         <role>
-            <roleId>9e848daa-2b35-444a-871b-95c9b998ed76</roleId>
+            <roleId>b5c798e6-3c1c-4c86-b9e0-40a5717bb084</roleId>
             <roleName>ROLE_TENANT_ADMINISTRATOR</roleName>
         </role>
     </permissionRole>
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>ea1d3e08-46ea-4be3-9858-a93f260999e1</permissionId>
+            <permissionId>f88aad7d-52f6-4622-9f63-37382f83caae</permissionId>
             <resourceName>accounts</resourceName>
         </permission>
         <role>
@@ -2257,22 +2737,22 @@
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>f79f2858-bfaf-422c-8490-20db274858ac</permissionId>
+            <permissionId>096e6ba8-c0c4-4a5e-b6ae-dd73c44e6351</permissionId>
             <resourceName>dimensions</resourceName>
         </permission>
         <role>
-            <roleId>b6af2c74-4238-44e1-b7c5-12b9a262a39e</roleId>
+            <roleId>45c752ca-75aa-4801-a65e-5b85119e4dde</roleId>
             <roleName>ROLE_TENANT_ADMINISTRATOR</roleName>
         </role>
         <role>
-            <roleId>9e848daa-2b35-444a-871b-95c9b998ed76</roleId>
+            <roleId>b5c798e6-3c1c-4c86-b9e0-40a5717bb084</roleId>
             <roleName>ROLE_TENANT_ADMINISTRATOR</roleName>
         </role>
     </permissionRole>
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>f79f2858-bfaf-422c-8490-20db274858ac</permissionId>
+            <permissionId>096e6ba8-c0c4-4a5e-b6ae-dd73c44e6351</permissionId>
             <resourceName>dimensions</resourceName>
         </permission>
         <role>
@@ -2283,22 +2763,22 @@
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>b3af3ebb-8a1d-43bb-9cd6-cbbbd42957d1</permissionId>
+            <permissionId>995a520f-2f8f-489f-bef1-2dc8edf13fa5</permissionId>
             <resourceName>contacts</resourceName>
         </permission>
         <role>
-            <roleId>b6af2c74-4238-44e1-b7c5-12b9a262a39e</roleId>
+            <roleId>45c752ca-75aa-4801-a65e-5b85119e4dde</roleId>
             <roleName>ROLE_TENANT_ADMINISTRATOR</roleName>
         </role>
         <role>
-            <roleId>9e848daa-2b35-444a-871b-95c9b998ed76</roleId>
+            <roleId>b5c798e6-3c1c-4c86-b9e0-40a5717bb084</roleId>
             <roleName>ROLE_TENANT_ADMINISTRATOR</roleName>
         </role>
     </permissionRole>
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>b3af3ebb-8a1d-43bb-9cd6-cbbbd42957d1</permissionId>
+            <permissionId>995a520f-2f8f-489f-bef1-2dc8edf13fa5</permissionId>
             <resourceName>contacts</resourceName>
         </permission>
         <role>
@@ -2309,24 +2789,24 @@
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>9ca70400-e0ee-4fe1-8c05-79cded28218a</permissionId>
+            <permissionId>adc7794d-b09f-4dfb-9d63-ec1fe406d761</permissionId>
             <resourceName>
                 /personauthorities/*/items/*/contacts
             </resourceName>
         </permission>
         <role>
-            <roleId>b6af2c74-4238-44e1-b7c5-12b9a262a39e</roleId>
+            <roleId>45c752ca-75aa-4801-a65e-5b85119e4dde</roleId>
             <roleName>ROLE_TENANT_ADMINISTRATOR</roleName>
         </role>
         <role>
-            <roleId>9e848daa-2b35-444a-871b-95c9b998ed76</roleId>
+            <roleId>b5c798e6-3c1c-4c86-b9e0-40a5717bb084</roleId>
             <roleName>ROLE_TENANT_ADMINISTRATOR</roleName>
         </role>
     </permissionRole>
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>9ca70400-e0ee-4fe1-8c05-79cded28218a</permissionId>
+            <permissionId>adc7794d-b09f-4dfb-9d63-ec1fe406d761</permissionId>
             <resourceName>
                 /personauthorities/*/items/*/contacts
             </resourceName>
@@ -2339,24 +2819,24 @@
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>3e181bcc-5346-4303-8ae7-f61218eddeeb</permissionId>
+            <permissionId>7dc8fdd5-ad08-4c7e-aa00-c2d625bad83e</permissionId>
             <resourceName>
                 /orgauthorities/*/items/*/contacts
             </resourceName>
         </permission>
         <role>
-            <roleId>b6af2c74-4238-44e1-b7c5-12b9a262a39e</roleId>
+            <roleId>45c752ca-75aa-4801-a65e-5b85119e4dde</roleId>
             <roleName>ROLE_TENANT_ADMINISTRATOR</roleName>
         </role>
         <role>
-            <roleId>9e848daa-2b35-444a-871b-95c9b998ed76</roleId>
+            <roleId>b5c798e6-3c1c-4c86-b9e0-40a5717bb084</roleId>
             <roleName>ROLE_TENANT_ADMINISTRATOR</roleName>
         </role>
     </permissionRole>
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>3e181bcc-5346-4303-8ae7-f61218eddeeb</permissionId>
+            <permissionId>7dc8fdd5-ad08-4c7e-aa00-c2d625bad83e</permissionId>
             <resourceName>
                 /orgauthorities/*/items/*/contacts
             </resourceName>
@@ -2369,22 +2849,22 @@
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>44fc3ac6-9171-4b12-91e7-d91db0c43245</permissionId>
+            <permissionId>1d8cc60c-b508-4afa-a332-fcc78f79b1ab</permissionId>
             <resourceName>notes</resourceName>
         </permission>
         <role>
-            <roleId>b6af2c74-4238-44e1-b7c5-12b9a262a39e</roleId>
+            <roleId>45c752ca-75aa-4801-a65e-5b85119e4dde</roleId>
             <roleName>ROLE_TENANT_ADMINISTRATOR</roleName>
         </role>
         <role>
-            <roleId>9e848daa-2b35-444a-871b-95c9b998ed76</roleId>
+            <roleId>b5c798e6-3c1c-4c86-b9e0-40a5717bb084</roleId>
             <roleName>ROLE_TENANT_ADMINISTRATOR</roleName>
         </role>
     </permissionRole>
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>44fc3ac6-9171-4b12-91e7-d91db0c43245</permissionId>
+            <permissionId>1d8cc60c-b508-4afa-a332-fcc78f79b1ab</permissionId>
             <resourceName>notes</resourceName>
         </permission>
         <role>
@@ -2395,22 +2875,22 @@
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>9210aac1-0a54-4937-98a6-93658b7f7544</permissionId>
+            <permissionId>6fca8fa6-c8e4-4919-9c66-e03c1259268a</permissionId>
             <resourceName>authorization/roles</resourceName>
         </permission>
         <role>
-            <roleId>b6af2c74-4238-44e1-b7c5-12b9a262a39e</roleId>
+            <roleId>45c752ca-75aa-4801-a65e-5b85119e4dde</roleId>
             <roleName>ROLE_TENANT_ADMINISTRATOR</roleName>
         </role>
         <role>
-            <roleId>9e848daa-2b35-444a-871b-95c9b998ed76</roleId>
+            <roleId>b5c798e6-3c1c-4c86-b9e0-40a5717bb084</roleId>
             <roleName>ROLE_TENANT_ADMINISTRATOR</roleName>
         </role>
     </permissionRole>
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>9210aac1-0a54-4937-98a6-93658b7f7544</permissionId>
+            <permissionId>6fca8fa6-c8e4-4919-9c66-e03c1259268a</permissionId>
             <resourceName>authorization/roles</resourceName>
         </permission>
         <role>
@@ -2421,22 +2901,22 @@
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>a9b46797-66cd-4162-996a-72dcbdf74376</permissionId>
+            <permissionId>55b2af98-4025-46f1-a593-3a2d5d41ae4d</permissionId>
             <resourceName>authorization/permissions</resourceName>
         </permission>
         <role>
-            <roleId>b6af2c74-4238-44e1-b7c5-12b9a262a39e</roleId>
+            <roleId>45c752ca-75aa-4801-a65e-5b85119e4dde</roleId>
             <roleName>ROLE_TENANT_ADMINISTRATOR</roleName>
         </role>
         <role>
-            <roleId>9e848daa-2b35-444a-871b-95c9b998ed76</roleId>
+            <roleId>b5c798e6-3c1c-4c86-b9e0-40a5717bb084</roleId>
             <roleName>ROLE_TENANT_ADMINISTRATOR</roleName>
         </role>
     </permissionRole>
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>a9b46797-66cd-4162-996a-72dcbdf74376</permissionId>
+            <permissionId>55b2af98-4025-46f1-a593-3a2d5d41ae4d</permissionId>
             <resourceName>authorization/permissions</resourceName>
         </permission>
         <role>
@@ -2447,22 +2927,22 @@
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>8fe974c4-5b78-4314-8a82-47718864c3d8</permissionId>
+            <permissionId>3b6c39aa-6019-4e47-90d4-0ccd613136cb</permissionId>
             <resourceName>authorization/permissions/permroles</resourceName>
         </permission>
         <role>
-            <roleId>b6af2c74-4238-44e1-b7c5-12b9a262a39e</roleId>
+            <roleId>45c752ca-75aa-4801-a65e-5b85119e4dde</roleId>
             <roleName>ROLE_TENANT_ADMINISTRATOR</roleName>
         </role>
         <role>
-            <roleId>9e848daa-2b35-444a-871b-95c9b998ed76</roleId>
+            <roleId>b5c798e6-3c1c-4c86-b9e0-40a5717bb084</roleId>
             <roleName>ROLE_TENANT_ADMINISTRATOR</roleName>
         </role>
     </permissionRole>
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>8fe974c4-5b78-4314-8a82-47718864c3d8</permissionId>
+            <permissionId>3b6c39aa-6019-4e47-90d4-0ccd613136cb</permissionId>
             <resourceName>authorization/permissions/permroles</resourceName>
         </permission>
         <role>
@@ -2473,24 +2953,24 @@
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>89add6ba-b859-4d89-b236-b67261abadb8</permissionId>
+            <permissionId>afcd676a-5d42-4437-8db7-e841e8cf524b</permissionId>
             <resourceName>
                 /authorization/permissions/*/permroles/
             </resourceName>
         </permission>
         <role>
-            <roleId>b6af2c74-4238-44e1-b7c5-12b9a262a39e</roleId>
+            <roleId>45c752ca-75aa-4801-a65e-5b85119e4dde</roleId>
             <roleName>ROLE_TENANT_ADMINISTRATOR</roleName>
         </role>
         <role>
-            <roleId>9e848daa-2b35-444a-871b-95c9b998ed76</roleId>
+            <roleId>b5c798e6-3c1c-4c86-b9e0-40a5717bb084</roleId>
             <roleName>ROLE_TENANT_ADMINISTRATOR</roleName>
         </role>
     </permissionRole>
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>89add6ba-b859-4d89-b236-b67261abadb8</permissionId>
+            <permissionId>afcd676a-5d42-4437-8db7-e841e8cf524b</permissionId>
             <resourceName>
                 /authorization/permissions/*/permroles/
             </resourceName>
@@ -2503,22 +2983,22 @@
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>35a63af4-c8f2-4d64-84a5-3877956d09c8</permissionId>
+            <permissionId>911ac4d5-4d9f-45ca-ae1c-108fe857f4f5</permissionId>
             <resourceName>accounts/accountroles</resourceName>
         </permission>
         <role>
-            <roleId>b6af2c74-4238-44e1-b7c5-12b9a262a39e</roleId>
+            <roleId>45c752ca-75aa-4801-a65e-5b85119e4dde</roleId>
             <roleName>ROLE_TENANT_ADMINISTRATOR</roleName>
         </role>
         <role>
-            <roleId>9e848daa-2b35-444a-871b-95c9b998ed76</roleId>
+            <roleId>b5c798e6-3c1c-4c86-b9e0-40a5717bb084</roleId>
             <roleName>ROLE_TENANT_ADMINISTRATOR</roleName>
         </role>
     </permissionRole>
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>35a63af4-c8f2-4d64-84a5-3877956d09c8</permissionId>
+            <permissionId>911ac4d5-4d9f-45ca-ae1c-108fe857f4f5</permissionId>
             <resourceName>accounts/accountroles</resourceName>
         </permission>
         <role>
@@ -2529,24 +3009,24 @@
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>c17b9a66-43a6-4e5d-95fd-ae17b69cf8a3</permissionId>
+            <permissionId>1bdd955c-52a1-477b-b1da-41cc0c4a703c</permissionId>
             <resourceName>
                 /accounts/*/accountroles/
             </resourceName>
         </permission>
         <role>
-            <roleId>b6af2c74-4238-44e1-b7c5-12b9a262a39e</roleId>
+            <roleId>45c752ca-75aa-4801-a65e-5b85119e4dde</roleId>
             <roleName>ROLE_TENANT_ADMINISTRATOR</roleName>
         </role>
         <role>
-            <roleId>9e848daa-2b35-444a-871b-95c9b998ed76</roleId>
+            <roleId>b5c798e6-3c1c-4c86-b9e0-40a5717bb084</roleId>
             <roleName>ROLE_TENANT_ADMINISTRATOR</roleName>
         </role>
     </permissionRole>
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>c17b9a66-43a6-4e5d-95fd-ae17b69cf8a3</permissionId>
+            <permissionId>1bdd955c-52a1-477b-b1da-41cc0c4a703c</permissionId>
             <resourceName>
                 /accounts/*/accountroles/
             </resourceName>
@@ -2559,22 +3039,22 @@
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>0de0bc4a-617e-4979-87df-3369dd43a22c</permissionId>
+            <permissionId>c06ef067-aa93-480f-8b0e-177a740302e9</permissionId>
             <resourceName>authorization/roles/permroles</resourceName>
         </permission>
         <role>
-            <roleId>b6af2c74-4238-44e1-b7c5-12b9a262a39e</roleId>
+            <roleId>45c752ca-75aa-4801-a65e-5b85119e4dde</roleId>
             <roleName>ROLE_TENANT_ADMINISTRATOR</roleName>
         </role>
         <role>
-            <roleId>9e848daa-2b35-444a-871b-95c9b998ed76</roleId>
+            <roleId>b5c798e6-3c1c-4c86-b9e0-40a5717bb084</roleId>
             <roleName>ROLE_TENANT_ADMINISTRATOR</roleName>
         </role>
     </permissionRole>
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>0de0bc4a-617e-4979-87df-3369dd43a22c</permissionId>
+            <permissionId>c06ef067-aa93-480f-8b0e-177a740302e9</permissionId>
             <resourceName>authorization/roles/permroles</resourceName>
         </permission>
         <role>
@@ -2585,24 +3065,24 @@
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>f2f1aa15-9090-4a2d-9014-50f34e961a57</permissionId>
+            <permissionId>db89bc4f-fddf-474c-a40f-af1c1d9c9012</permissionId>
             <resourceName>
                 /authorization/roles/*/permroles/
             </resourceName>
         </permission>
         <role>
-            <roleId>b6af2c74-4238-44e1-b7c5-12b9a262a39e</roleId>
+            <roleId>45c752ca-75aa-4801-a65e-5b85119e4dde</roleId>
             <roleName>ROLE_TENANT_ADMINISTRATOR</roleName>
         </role>
         <role>
-            <roleId>9e848daa-2b35-444a-871b-95c9b998ed76</roleId>
+            <roleId>b5c798e6-3c1c-4c86-b9e0-40a5717bb084</roleId>
             <roleName>ROLE_TENANT_ADMINISTRATOR</roleName>
         </role>
     </permissionRole>
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>f2f1aa15-9090-4a2d-9014-50f34e961a57</permissionId>
+            <permissionId>db89bc4f-fddf-474c-a40f-af1c1d9c9012</permissionId>
             <resourceName>
                 /authorization/roles/*/permroles/
             </resourceName>
@@ -2615,1494 +3095,1766 @@
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>98073abf-888d-4f00-8c19-38debcebf27f</permissionId>
+            <permissionId>e321c586-2430-42c0-b749-576426a7e748</permissionId>
             <resourceName>idgenerators</resourceName>
         </permission>
         <role>
-            <roleId>f7cf0799-0f99-475b-a429-c7cca1349341</roleId>
+            <roleId>58b72cb3-d619-43cb-b58b-853802a09f83</roleId>
             <roleName>ROLE_TENANT_READER</roleName>
         </role>
         <role>
-            <roleId>bbbf085e-3680-4836-a525-52d6d687c1e6</roleId>
+            <roleId>16a94748-d98b-4a6d-b404-795915856dca</roleId>
             <roleName>ROLE_TENANT_READER</roleName>
         </role>
     </permissionRole>
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>f14e2b1b-3e14-4cff-917b-6df1cabd2f68</permissionId>
+            <permissionId>08d46fe2-e630-4aa6-81c4-d7ff88425ff3</permissionId>
             <resourceName>id</resourceName>
         </permission>
         <role>
-            <roleId>f7cf0799-0f99-475b-a429-c7cca1349341</roleId>
+            <roleId>58b72cb3-d619-43cb-b58b-853802a09f83</roleId>
             <roleName>ROLE_TENANT_READER</roleName>
         </role>
         <role>
-            <roleId>bbbf085e-3680-4836-a525-52d6d687c1e6</roleId>
+            <roleId>16a94748-d98b-4a6d-b404-795915856dca</roleId>
             <roleName>ROLE_TENANT_READER</roleName>
         </role>
     </permissionRole>
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>cea5e92b-2b59-44f0-b302-fc4a7c7a4655</permissionId>
+            <permissionId>39339b7f-7bdd-48a6-a08a-94ea9ec5dcdf</permissionId>
             <resourceName>
                 /idgenerators/*/ids
             </resourceName>
         </permission>
         <role>
-            <roleId>f7cf0799-0f99-475b-a429-c7cca1349341</roleId>
+            <roleId>58b72cb3-d619-43cb-b58b-853802a09f83</roleId>
             <roleName>ROLE_TENANT_READER</roleName>
         </role>
         <role>
-            <roleId>bbbf085e-3680-4836-a525-52d6d687c1e6</roleId>
+            <roleId>16a94748-d98b-4a6d-b404-795915856dca</roleId>
             <roleName>ROLE_TENANT_READER</roleName>
         </role>
     </permissionRole>
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>3b821c8f-0d13-4065-acb6-8ff3b38988fb</permissionId>
+            <permissionId>dab0cb0d-cec3-4993-8b57-612a3fc0f990</permissionId>
             <resourceName>collectionobjects</resourceName>
         </permission>
         <role>
-            <roleId>f7cf0799-0f99-475b-a429-c7cca1349341</roleId>
+            <roleId>58b72cb3-d619-43cb-b58b-853802a09f83</roleId>
             <roleName>ROLE_TENANT_READER</roleName>
         </role>
         <role>
-            <roleId>bbbf085e-3680-4836-a525-52d6d687c1e6</roleId>
+            <roleId>16a94748-d98b-4a6d-b404-795915856dca</roleId>
             <roleName>ROLE_TENANT_READER</roleName>
         </role>
     </permissionRole>
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>e82f31a6-5387-4293-80b8-0ad694e7b132</permissionId>
+            <permissionId>a16d99c3-e235-42c5-bc13-ff06709ff46d</permissionId>
             <resourceName>
                 /collectionobjects/*/authorityrefs/
             </resourceName>
         </permission>
         <role>
-            <roleId>f7cf0799-0f99-475b-a429-c7cca1349341</roleId>
+            <roleId>58b72cb3-d619-43cb-b58b-853802a09f83</roleId>
             <roleName>ROLE_TENANT_READER</roleName>
         </role>
         <role>
-            <roleId>bbbf085e-3680-4836-a525-52d6d687c1e6</roleId>
+            <roleId>16a94748-d98b-4a6d-b404-795915856dca</roleId>
             <roleName>ROLE_TENANT_READER</roleName>
         </role>
     </permissionRole>
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>2667726e-5406-4a05-9035-c79de29864d3</permissionId>
+            <permissionId>bdd08bcc-d89c-4aa4-a03f-452da1e82939</permissionId>
             <resourceName>intakes</resourceName>
         </permission>
         <role>
-            <roleId>f7cf0799-0f99-475b-a429-c7cca1349341</roleId>
+            <roleId>58b72cb3-d619-43cb-b58b-853802a09f83</roleId>
             <roleName>ROLE_TENANT_READER</roleName>
         </role>
         <role>
-            <roleId>bbbf085e-3680-4836-a525-52d6d687c1e6</roleId>
+            <roleId>16a94748-d98b-4a6d-b404-795915856dca</roleId>
             <roleName>ROLE_TENANT_READER</roleName>
         </role>
     </permissionRole>
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>d1b8585b-5647-4243-b5da-ef89fbe7a45c</permissionId>
+            <permissionId>adb7e196-8353-4ac9-859b-d80fdfbd9aa6</permissionId>
             <resourceName>
                 /intakes/*/authorityrefs/
             </resourceName>
         </permission>
         <role>
-            <roleId>f7cf0799-0f99-475b-a429-c7cca1349341</roleId>
+            <roleId>58b72cb3-d619-43cb-b58b-853802a09f83</roleId>
             <roleName>ROLE_TENANT_READER</roleName>
         </role>
         <role>
-            <roleId>bbbf085e-3680-4836-a525-52d6d687c1e6</roleId>
+            <roleId>16a94748-d98b-4a6d-b404-795915856dca</roleId>
             <roleName>ROLE_TENANT_READER</roleName>
         </role>
     </permissionRole>
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>7d7ccb35-3272-4d74-a7a5-a40145454ff4</permissionId>
+            <permissionId>860e93b0-4986-41db-9130-7ac6b7815bd4</permissionId>
             <resourceName>loansin</resourceName>
         </permission>
         <role>
-            <roleId>f7cf0799-0f99-475b-a429-c7cca1349341</roleId>
+            <roleId>58b72cb3-d619-43cb-b58b-853802a09f83</roleId>
             <roleName>ROLE_TENANT_READER</roleName>
         </role>
         <role>
-            <roleId>bbbf085e-3680-4836-a525-52d6d687c1e6</roleId>
+            <roleId>16a94748-d98b-4a6d-b404-795915856dca</roleId>
             <roleName>ROLE_TENANT_READER</roleName>
         </role>
     </permissionRole>
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>f094c722-7d5f-43f6-af7e-a77d752c935d</permissionId>
+            <permissionId>d03040a4-1d57-4abc-8fc6-ff9b9477bffd</permissionId>
             <resourceName>
                 /loansin/*/authorityrefs/
             </resourceName>
         </permission>
         <role>
-            <roleId>f7cf0799-0f99-475b-a429-c7cca1349341</roleId>
+            <roleId>58b72cb3-d619-43cb-b58b-853802a09f83</roleId>
             <roleName>ROLE_TENANT_READER</roleName>
         </role>
         <role>
-            <roleId>bbbf085e-3680-4836-a525-52d6d687c1e6</roleId>
+            <roleId>16a94748-d98b-4a6d-b404-795915856dca</roleId>
             <roleName>ROLE_TENANT_READER</roleName>
         </role>
     </permissionRole>
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>d4e6eb56-4616-45a0-b9e8-78c884830e6b</permissionId>
+            <permissionId>c8d883dc-c07b-4d66-8df0-207108426257</permissionId>
             <resourceName>loansout</resourceName>
         </permission>
         <role>
-            <roleId>f7cf0799-0f99-475b-a429-c7cca1349341</roleId>
+            <roleId>58b72cb3-d619-43cb-b58b-853802a09f83</roleId>
             <roleName>ROLE_TENANT_READER</roleName>
         </role>
         <role>
-            <roleId>bbbf085e-3680-4836-a525-52d6d687c1e6</roleId>
+            <roleId>16a94748-d98b-4a6d-b404-795915856dca</roleId>
             <roleName>ROLE_TENANT_READER</roleName>
         </role>
     </permissionRole>
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>28b6d76d-a2ad-4f79-883e-f63a932f85eb</permissionId>
+            <permissionId>086f839f-0783-4ff1-b5c6-be5f444da4f9</permissionId>
             <resourceName>
                 /loansout/*/authorityrefs/
             </resourceName>
         </permission>
         <role>
-            <roleId>f7cf0799-0f99-475b-a429-c7cca1349341</roleId>
+            <roleId>58b72cb3-d619-43cb-b58b-853802a09f83</roleId>
             <roleName>ROLE_TENANT_READER</roleName>
         </role>
         <role>
-            <roleId>bbbf085e-3680-4836-a525-52d6d687c1e6</roleId>
+            <roleId>16a94748-d98b-4a6d-b404-795915856dca</roleId>
             <roleName>ROLE_TENANT_READER</roleName>
         </role>
     </permissionRole>
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>894f720a-d0df-4438-b0a8-625a23e38e26</permissionId>
+            <permissionId>47a03c57-b6e7-4a50-a66d-e31ab60bf048</permissionId>
             <resourceName>movements</resourceName>
         </permission>
         <role>
-            <roleId>f7cf0799-0f99-475b-a429-c7cca1349341</roleId>
+            <roleId>58b72cb3-d619-43cb-b58b-853802a09f83</roleId>
             <roleName>ROLE_TENANT_READER</roleName>
         </role>
         <role>
-            <roleId>bbbf085e-3680-4836-a525-52d6d687c1e6</roleId>
+            <roleId>16a94748-d98b-4a6d-b404-795915856dca</roleId>
             <roleName>ROLE_TENANT_READER</roleName>
         </role>
     </permissionRole>
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>7aeda5a7-7997-4629-8c9e-0ff1ee2593b6</permissionId>
+            <permissionId>8c13e4af-23ff-4aed-ba2d-716544647f58</permissionId>
             <resourceName>
                 /movements/*/authorityrefs/
             </resourceName>
         </permission>
         <role>
-            <roleId>f7cf0799-0f99-475b-a429-c7cca1349341</roleId>
+            <roleId>58b72cb3-d619-43cb-b58b-853802a09f83</roleId>
             <roleName>ROLE_TENANT_READER</roleName>
         </role>
         <role>
-            <roleId>bbbf085e-3680-4836-a525-52d6d687c1e6</roleId>
+            <roleId>16a94748-d98b-4a6d-b404-795915856dca</roleId>
             <roleName>ROLE_TENANT_READER</roleName>
         </role>
     </permissionRole>
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>4dc16aef-1e22-4756-8c27-fc931dc10b6d</permissionId>
+            <permissionId>40fcf4c1-71d2-463a-bc48-de499b5d3406</permissionId>
             <resourceName>vocabularies</resourceName>
         </permission>
         <role>
-            <roleId>f7cf0799-0f99-475b-a429-c7cca1349341</roleId>
+            <roleId>58b72cb3-d619-43cb-b58b-853802a09f83</roleId>
             <roleName>ROLE_TENANT_READER</roleName>
         </role>
         <role>
-            <roleId>bbbf085e-3680-4836-a525-52d6d687c1e6</roleId>
+            <roleId>16a94748-d98b-4a6d-b404-795915856dca</roleId>
             <roleName>ROLE_TENANT_READER</roleName>
         </role>
     </permissionRole>
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>0d1b57c4-178d-48b9-9423-0c01c7f8fb5f</permissionId>
+            <permissionId>38718fe4-9f05-4dd7-9012-64c16eef4f90</permissionId>
             <resourceName>vocabularyitems</resourceName>
         </permission>
         <role>
-            <roleId>f7cf0799-0f99-475b-a429-c7cca1349341</roleId>
+            <roleId>58b72cb3-d619-43cb-b58b-853802a09f83</roleId>
             <roleName>ROLE_TENANT_READER</roleName>
         </role>
         <role>
-            <roleId>bbbf085e-3680-4836-a525-52d6d687c1e6</roleId>
+            <roleId>16a94748-d98b-4a6d-b404-795915856dca</roleId>
             <roleName>ROLE_TENANT_READER</roleName>
         </role>
     </permissionRole>
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>bd343314-2399-4bc2-8dc6-f241341592c5</permissionId>
+            <permissionId>1d8a8147-07ef-44b8-9312-2fd1a7e06fdf</permissionId>
             <resourceName>
                 /vocabularies/*/items/
             </resourceName>
         </permission>
         <role>
-            <roleId>f7cf0799-0f99-475b-a429-c7cca1349341</roleId>
+            <roleId>58b72cb3-d619-43cb-b58b-853802a09f83</roleId>
             <roleName>ROLE_TENANT_READER</roleName>
         </role>
         <role>
-            <roleId>bbbf085e-3680-4836-a525-52d6d687c1e6</roleId>
+            <roleId>16a94748-d98b-4a6d-b404-795915856dca</roleId>
             <roleName>ROLE_TENANT_READER</roleName>
         </role>
     </permissionRole>
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>cb5db5ab-8435-4b27-8970-5fb2287ba482</permissionId>
+            <permissionId>8b2bd395-541e-4369-8743-b07e4840619a</permissionId>
             <resourceName>orgauthorities</resourceName>
         </permission>
         <role>
-            <roleId>f7cf0799-0f99-475b-a429-c7cca1349341</roleId>
+            <roleId>58b72cb3-d619-43cb-b58b-853802a09f83</roleId>
             <roleName>ROLE_TENANT_READER</roleName>
         </role>
         <role>
-            <roleId>bbbf085e-3680-4836-a525-52d6d687c1e6</roleId>
+            <roleId>16a94748-d98b-4a6d-b404-795915856dca</roleId>
             <roleName>ROLE_TENANT_READER</roleName>
         </role>
     </permissionRole>
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>87ff7ced-18ce-45d7-82f7-1a3abcfd858f</permissionId>
+            <permissionId>e7304ccc-3696-4bdd-bdd9-db569c455582</permissionId>
             <resourceName>
                 /orgauthorities/*/items/*/authorityrefs/
             </resourceName>
         </permission>
         <role>
-            <roleId>f7cf0799-0f99-475b-a429-c7cca1349341</roleId>
+            <roleId>58b72cb3-d619-43cb-b58b-853802a09f83</roleId>
             <roleName>ROLE_TENANT_READER</roleName>
         </role>
         <role>
-            <roleId>bbbf085e-3680-4836-a525-52d6d687c1e6</roleId>
+            <roleId>16a94748-d98b-4a6d-b404-795915856dca</roleId>
             <roleName>ROLE_TENANT_READER</roleName>
         </role>
     </permissionRole>
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>c6d94fa2-2ae0-4c8c-9cce-227189bf87b9</permissionId>
+            <permissionId>98f764c6-33a3-4933-abd3-3ed2c85b916f</permissionId>
             <resourceName>organizations</resourceName>
         </permission>
         <role>
-            <roleId>f7cf0799-0f99-475b-a429-c7cca1349341</roleId>
+            <roleId>58b72cb3-d619-43cb-b58b-853802a09f83</roleId>
             <roleName>ROLE_TENANT_READER</roleName>
         </role>
         <role>
-            <roleId>bbbf085e-3680-4836-a525-52d6d687c1e6</roleId>
+            <roleId>16a94748-d98b-4a6d-b404-795915856dca</roleId>
             <roleName>ROLE_TENANT_READER</roleName>
         </role>
     </permissionRole>
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>690f031c-eb94-44d8-a843-83f35e84e871</permissionId>
+            <permissionId>a4e0dfb5-8939-4f44-b23a-f88659ed8019</permissionId>
             <resourceName>
                 /orgauthorities/*/items/
             </resourceName>
         </permission>
         <role>
-            <roleId>f7cf0799-0f99-475b-a429-c7cca1349341</roleId>
+            <roleId>58b72cb3-d619-43cb-b58b-853802a09f83</roleId>
             <roleName>ROLE_TENANT_READER</roleName>
         </role>
         <role>
-            <roleId>bbbf085e-3680-4836-a525-52d6d687c1e6</roleId>
+            <roleId>16a94748-d98b-4a6d-b404-795915856dca</roleId>
             <roleName>ROLE_TENANT_READER</roleName>
         </role>
     </permissionRole>
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>9d4ad424-ccce-401a-a954-8d5b796ad723</permissionId>
+            <permissionId>512812bf-2587-4d6c-b87e-8dfbe43ad0e2</permissionId>
             <resourceName>
                 /orgauthorities/*/items/*/refobjs
             </resourceName>
         </permission>
         <role>
-            <roleId>f7cf0799-0f99-475b-a429-c7cca1349341</roleId>
+            <roleId>58b72cb3-d619-43cb-b58b-853802a09f83</roleId>
             <roleName>ROLE_TENANT_READER</roleName>
         </role>
         <role>
-            <roleId>bbbf085e-3680-4836-a525-52d6d687c1e6</roleId>
+            <roleId>16a94748-d98b-4a6d-b404-795915856dca</roleId>
             <roleName>ROLE_TENANT_READER</roleName>
         </role>
     </permissionRole>
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>e7b233cb-239c-4ce6-b66c-4b7b8ebae3df</permissionId>
+            <permissionId>d539d845-8151-48ec-910e-5c84e71f9a45</permissionId>
             <resourceName>personauthorities</resourceName>
         </permission>
         <role>
-            <roleId>f7cf0799-0f99-475b-a429-c7cca1349341</roleId>
+            <roleId>58b72cb3-d619-43cb-b58b-853802a09f83</roleId>
             <roleName>ROLE_TENANT_READER</roleName>
         </role>
         <role>
-            <roleId>bbbf085e-3680-4836-a525-52d6d687c1e6</roleId>
+            <roleId>16a94748-d98b-4a6d-b404-795915856dca</roleId>
             <roleName>ROLE_TENANT_READER</roleName>
         </role>
     </permissionRole>
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>c7deb54d-0ceb-4517-bfa1-da2d60563df9</permissionId>
+            <permissionId>9316d182-7ec6-48d2-89be-5b7403d08e27</permissionId>
             <resourceName>
                 /personauthorities/*/items/
             </resourceName>
         </permission>
         <role>
-            <roleId>f7cf0799-0f99-475b-a429-c7cca1349341</roleId>
+            <roleId>58b72cb3-d619-43cb-b58b-853802a09f83</roleId>
             <roleName>ROLE_TENANT_READER</roleName>
         </role>
         <role>
-            <roleId>bbbf085e-3680-4836-a525-52d6d687c1e6</roleId>
+            <roleId>16a94748-d98b-4a6d-b404-795915856dca</roleId>
             <roleName>ROLE_TENANT_READER</roleName>
         </role>
     </permissionRole>
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>d489ef98-d309-4ba7-af0a-ac3ddc30194d</permissionId>
+            <permissionId>4a7fafa9-9d50-4097-beea-9df8bcca514d</permissionId>
             <resourceName>
                 /personauthorities/*/items/*/refobjs
             </resourceName>
         </permission>
         <role>
-            <roleId>f7cf0799-0f99-475b-a429-c7cca1349341</roleId>
+            <roleId>58b72cb3-d619-43cb-b58b-853802a09f83</roleId>
             <roleName>ROLE_TENANT_READER</roleName>
         </role>
         <role>
-            <roleId>bbbf085e-3680-4836-a525-52d6d687c1e6</roleId>
+            <roleId>16a94748-d98b-4a6d-b404-795915856dca</roleId>
             <roleName>ROLE_TENANT_READER</roleName>
         </role>
     </permissionRole>
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>ba24b26b-ebc5-477b-9271-bbea2846c1b8</permissionId>
+            <permissionId>d4eeaf6b-b988-4a0f-b507-42649c500b13</permissionId>
             <resourceName>persons</resourceName>
         </permission>
         <role>
-            <roleId>f7cf0799-0f99-475b-a429-c7cca1349341</roleId>
+            <roleId>58b72cb3-d619-43cb-b58b-853802a09f83</roleId>
             <roleName>ROLE_TENANT_READER</roleName>
         </role>
         <role>
-            <roleId>bbbf085e-3680-4836-a525-52d6d687c1e6</roleId>
+            <roleId>16a94748-d98b-4a6d-b404-795915856dca</roleId>
             <roleName>ROLE_TENANT_READER</roleName>
         </role>
     </permissionRole>
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>85222bfe-e079-4c2a-bf13-17d5e1d214ab</permissionId>
+            <permissionId>90f99e52-15c9-4c81-a576-ebe32f81a86c</permissionId>
             <resourceName>
                 /personauthorities/*/items/
             </resourceName>
         </permission>
         <role>
-            <roleId>f7cf0799-0f99-475b-a429-c7cca1349341</roleId>
+            <roleId>58b72cb3-d619-43cb-b58b-853802a09f83</roleId>
             <roleName>ROLE_TENANT_READER</roleName>
         </role>
         <role>
-            <roleId>bbbf085e-3680-4836-a525-52d6d687c1e6</roleId>
+            <roleId>16a94748-d98b-4a6d-b404-795915856dca</roleId>
             <roleName>ROLE_TENANT_READER</roleName>
         </role>
     </permissionRole>
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>9d08eb07-34a5-477f-a420-8d927bb37ee9</permissionId>
+            <permissionId>486dd4ff-248a-4bca-9338-5ca691c32295</permissionId>
             <resourceName>locationauthorities</resourceName>
         </permission>
         <role>
-            <roleId>f7cf0799-0f99-475b-a429-c7cca1349341</roleId>
+            <roleId>58b72cb3-d619-43cb-b58b-853802a09f83</roleId>
             <roleName>ROLE_TENANT_READER</roleName>
         </role>
         <role>
-            <roleId>bbbf085e-3680-4836-a525-52d6d687c1e6</roleId>
+            <roleId>16a94748-d98b-4a6d-b404-795915856dca</roleId>
             <roleName>ROLE_TENANT_READER</roleName>
         </role>
     </permissionRole>
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>1c780d54-247e-4653-99da-ea395d741128</permissionId>
+            <permissionId>318a6a2b-6932-4fcb-a836-fbbef4568077</permissionId>
             <resourceName>
                 /locationauthorities/*/items/
             </resourceName>
         </permission>
         <role>
-            <roleId>f7cf0799-0f99-475b-a429-c7cca1349341</roleId>
+            <roleId>58b72cb3-d619-43cb-b58b-853802a09f83</roleId>
             <roleName>ROLE_TENANT_READER</roleName>
         </role>
         <role>
-            <roleId>bbbf085e-3680-4836-a525-52d6d687c1e6</roleId>
+            <roleId>16a94748-d98b-4a6d-b404-795915856dca</roleId>
             <roleName>ROLE_TENANT_READER</roleName>
         </role>
     </permissionRole>
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>7481a749-d1b6-4627-8a48-95356ee089a7</permissionId>
+            <permissionId>68c1652b-dba0-476c-8b50-1d5729424f55</permissionId>
             <resourceName>locations</resourceName>
         </permission>
         <role>
-            <roleId>f7cf0799-0f99-475b-a429-c7cca1349341</roleId>
+            <roleId>58b72cb3-d619-43cb-b58b-853802a09f83</roleId>
             <roleName>ROLE_TENANT_READER</roleName>
         </role>
         <role>
-            <roleId>bbbf085e-3680-4836-a525-52d6d687c1e6</roleId>
+            <roleId>16a94748-d98b-4a6d-b404-795915856dca</roleId>
             <roleName>ROLE_TENANT_READER</roleName>
         </role>
     </permissionRole>
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>08b97355-3da2-4658-8692-8fc128e6baf5</permissionId>
+            <permissionId>865d8115-dcdb-4063-a0af-8ea52b3adbe8</permissionId>
             <resourceName>acquisitions</resourceName>
         </permission>
         <role>
-            <roleId>f7cf0799-0f99-475b-a429-c7cca1349341</roleId>
+            <roleId>58b72cb3-d619-43cb-b58b-853802a09f83</roleId>
             <roleName>ROLE_TENANT_READER</roleName>
         </role>
         <role>
-            <roleId>bbbf085e-3680-4836-a525-52d6d687c1e6</roleId>
+            <roleId>16a94748-d98b-4a6d-b404-795915856dca</roleId>
             <roleName>ROLE_TENANT_READER</roleName>
         </role>
     </permissionRole>
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>afa330e9-0472-4615-b5a5-2ca6137bef85</permissionId>
+            <permissionId>be4b72f4-12e3-40c6-a633-4be38e951077</permissionId>
             <resourceName>
                 /acquisitions/*/authorityrefs/
             </resourceName>
         </permission>
         <role>
-            <roleId>f7cf0799-0f99-475b-a429-c7cca1349341</roleId>
+            <roleId>58b72cb3-d619-43cb-b58b-853802a09f83</roleId>
             <roleName>ROLE_TENANT_READER</roleName>
         </role>
         <role>
-            <roleId>bbbf085e-3680-4836-a525-52d6d687c1e6</roleId>
+            <roleId>16a94748-d98b-4a6d-b404-795915856dca</roleId>
             <roleName>ROLE_TENANT_READER</roleName>
         </role>
     </permissionRole>
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>975606e4-2357-4d2d-a9a5-3cb5e9bcf1b9</permissionId>
+            <permissionId>63bcaf78-bf7f-4604-83bb-4a43bf5dff7d</permissionId>
             <resourceName>relations</resourceName>
         </permission>
         <role>
-            <roleId>f7cf0799-0f99-475b-a429-c7cca1349341</roleId>
+            <roleId>58b72cb3-d619-43cb-b58b-853802a09f83</roleId>
+            <roleName>ROLE_TENANT_READER</roleName>
+        </role>
+        <role>
+            <roleId>16a94748-d98b-4a6d-b404-795915856dca</roleId>
+            <roleName>ROLE_TENANT_READER</roleName>
+        </role>
+    </permissionRole>
+    <permissionRole>
+        <subject>ROLE</subject>
+        <permission>
+            <permissionId>e26b68bd-4ad1-46c2-8b9a-6af46ac544ed</permissionId>
+            <resourceName>
+                /relations/object/*
+            </resourceName>
+        </permission>
+        <role>
+            <roleId>58b72cb3-d619-43cb-b58b-853802a09f83</roleId>
+            <roleName>ROLE_TENANT_READER</roleName>
+        </role>
+        <role>
+            <roleId>16a94748-d98b-4a6d-b404-795915856dca</roleId>
+            <roleName>ROLE_TENANT_READER</roleName>
+        </role>
+    </permissionRole>
+    <permissionRole>
+        <subject>ROLE</subject>
+        <permission>
+            <permissionId>30954e8e-004c-450b-9055-584f49f163e9</permissionId>
+            <resourceName>
+                /relations/object/*/type/*
+            </resourceName>
+        </permission>
+        <role>
+            <roleId>58b72cb3-d619-43cb-b58b-853802a09f83</roleId>
+            <roleName>ROLE_TENANT_READER</roleName>
+        </role>
+        <role>
+            <roleId>16a94748-d98b-4a6d-b404-795915856dca</roleId>
+            <roleName>ROLE_TENANT_READER</roleName>
+        </role>
+    </permissionRole>
+    <permissionRole>
+        <subject>ROLE</subject>
+        <permission>
+            <permissionId>9f78b49d-7431-4790-8281-ede335a50984</permissionId>
+            <resourceName>
+                /relations/subject/*
+            </resourceName>
+        </permission>
+        <role>
+            <roleId>58b72cb3-d619-43cb-b58b-853802a09f83</roleId>
+            <roleName>ROLE_TENANT_READER</roleName>
+        </role>
+        <role>
+            <roleId>16a94748-d98b-4a6d-b404-795915856dca</roleId>
+            <roleName>ROLE_TENANT_READER</roleName>
+        </role>
+    </permissionRole>
+    <permissionRole>
+        <subject>ROLE</subject>
+        <permission>
+            <permissionId>bb21d239-2478-4ffe-a3f2-6195dee4a548</permissionId>
+            <resourceName>
+                /relations/subject/*/type/*
+            </resourceName>
+        </permission>
+        <role>
+            <roleId>58b72cb3-d619-43cb-b58b-853802a09f83</roleId>
+            <roleName>ROLE_TENANT_READER</roleName>
+        </role>
+        <role>
+            <roleId>16a94748-d98b-4a6d-b404-795915856dca</roleId>
+            <roleName>ROLE_TENANT_READER</roleName>
+        </role>
+    </permissionRole>
+    <permissionRole>
+        <subject>ROLE</subject>
+        <permission>
+            <permissionId>5b288cd6-d424-4e93-a992-edf27af45128</permissionId>
+            <resourceName>
+                /relations/subject/*/type/*/object/*
+            </resourceName>
+        </permission>
+        <role>
+            <roleId>58b72cb3-d619-43cb-b58b-853802a09f83</roleId>
+            <roleName>ROLE_TENANT_READER</roleName>
+        </role>
+        <role>
+            <roleId>16a94748-d98b-4a6d-b404-795915856dca</roleId>
+            <roleName>ROLE_TENANT_READER</roleName>
+        </role>
+    </permissionRole>
+    <permissionRole>
+        <subject>ROLE</subject>
+        <permission>
+            <permissionId>ac3a071c-c330-4d88-b6af-42c7452b0319</permissionId>
+            <resourceName>
+                /relations/type/*
+            </resourceName>
+        </permission>
+        <role>
+            <roleId>58b72cb3-d619-43cb-b58b-853802a09f83</roleId>
+            <roleName>ROLE_TENANT_READER</roleName>
+        </role>
+        <role>
+            <roleId>16a94748-d98b-4a6d-b404-795915856dca</roleId>
+            <roleName>ROLE_TENANT_READER</roleName>
+        </role>
+    </permissionRole>
+    <permissionRole>
+        <subject>ROLE</subject>
+        <permission>
+            <permissionId>f62eacf7-22b9-4645-ba7e-ce9ff6d0fb17</permissionId>
+            <resourceName>
+                /relations/type/*/object/*
+            </resourceName>
+        </permission>
+        <role>
+            <roleId>58b72cb3-d619-43cb-b58b-853802a09f83</roleId>
+            <roleName>ROLE_TENANT_READER</roleName>
+        </role>
+        <role>
+            <roleId>16a94748-d98b-4a6d-b404-795915856dca</roleId>
+            <roleName>ROLE_TENANT_READER</roleName>
+        </role>
+    </permissionRole>
+    <permissionRole>
+        <subject>ROLE</subject>
+        <permission>
+            <permissionId>971be36e-03bb-429f-99c7-bac9d4f70946</permissionId>
+            <resourceName>
+                /relations/type/*/subject/*
+            </resourceName>
+        </permission>
+        <role>
+            <roleId>58b72cb3-d619-43cb-b58b-853802a09f83</roleId>
             <roleName>ROLE_TENANT_READER</roleName>
         </role>
         <role>
-            <roleId>bbbf085e-3680-4836-a525-52d6d687c1e6</roleId>
+            <roleId>16a94748-d98b-4a6d-b404-795915856dca</roleId>
             <roleName>ROLE_TENANT_READER</roleName>
         </role>
     </permissionRole>
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>3b0120a4-380a-4834-bf42-e72045445224</permissionId>
+            <permissionId>2b5fca54-1784-4e09-9855-dd26b702843f</permissionId>
             <resourceName>
-                relations/subject/*/type/*/object/*
+                /relations/type/*/subject/*/object/*
             </resourceName>
         </permission>
         <role>
-            <roleId>f7cf0799-0f99-475b-a429-c7cca1349341</roleId>
+            <roleId>58b72cb3-d619-43cb-b58b-853802a09f83</roleId>
             <roleName>ROLE_TENANT_READER</roleName>
         </role>
         <role>
-            <roleId>bbbf085e-3680-4836-a525-52d6d687c1e6</roleId>
+            <roleId>16a94748-d98b-4a6d-b404-795915856dca</roleId>
             <roleName>ROLE_TENANT_READER</roleName>
         </role>
     </permissionRole>
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>49bf8151-666c-42f6-95df-f23a9e96280e</permissionId>
+            <permissionId>a6c84692-086d-4d4f-865f-ec985705ec40</permissionId>
             <resourceName>accounts</resourceName>
         </permission>
         <role>
-            <roleId>f7cf0799-0f99-475b-a429-c7cca1349341</roleId>
+            <roleId>58b72cb3-d619-43cb-b58b-853802a09f83</roleId>
             <roleName>ROLE_TENANT_READER</roleName>
         </role>
         <role>
-            <roleId>bbbf085e-3680-4836-a525-52d6d687c1e6</roleId>
+            <roleId>16a94748-d98b-4a6d-b404-795915856dca</roleId>
             <roleName>ROLE_TENANT_READER</roleName>
         </role>
     </permissionRole>
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>c2d2e876-bb3e-4f06-a198-814721600cf0</permissionId>
+            <permissionId>9ab95f1b-1614-4f97-b7dd-20a9c9631234</permissionId>
             <resourceName>dimensions</resourceName>
         </permission>
         <role>
-            <roleId>f7cf0799-0f99-475b-a429-c7cca1349341</roleId>
+            <roleId>58b72cb3-d619-43cb-b58b-853802a09f83</roleId>
             <roleName>ROLE_TENANT_READER</roleName>
         </role>
         <role>
-            <roleId>bbbf085e-3680-4836-a525-52d6d687c1e6</roleId>
+            <roleId>16a94748-d98b-4a6d-b404-795915856dca</roleId>
             <roleName>ROLE_TENANT_READER</roleName>
         </role>
     </permissionRole>
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>9f37d080-26fa-45ef-be95-a495ab92e553</permissionId>
+            <permissionId>3a095ad3-7df7-45c8-a8fc-bde2b4a98c27</permissionId>
             <resourceName>contacts</resourceName>
         </permission>
         <role>
-            <roleId>f7cf0799-0f99-475b-a429-c7cca1349341</roleId>
+            <roleId>58b72cb3-d619-43cb-b58b-853802a09f83</roleId>
             <roleName>ROLE_TENANT_READER</roleName>
         </role>
         <role>
-            <roleId>bbbf085e-3680-4836-a525-52d6d687c1e6</roleId>
+            <roleId>16a94748-d98b-4a6d-b404-795915856dca</roleId>
             <roleName>ROLE_TENANT_READER</roleName>
         </role>
     </permissionRole>
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>70f4b500-85ce-4939-8797-63a5a2858131</permissionId>
+            <permissionId>6a06422b-3272-4156-8553-bb8f31054c6e</permissionId>
             <resourceName>
                 /personauthorities/*/items/*/contacts
             </resourceName>
         </permission>
         <role>
-            <roleId>f7cf0799-0f99-475b-a429-c7cca1349341</roleId>
+            <roleId>58b72cb3-d619-43cb-b58b-853802a09f83</roleId>
             <roleName>ROLE_TENANT_READER</roleName>
         </role>
         <role>
-            <roleId>bbbf085e-3680-4836-a525-52d6d687c1e6</roleId>
+            <roleId>16a94748-d98b-4a6d-b404-795915856dca</roleId>
             <roleName>ROLE_TENANT_READER</roleName>
         </role>
     </permissionRole>
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>4903240c-2d6c-4063-8d5f-b47cd0d705fa</permissionId>
+            <permissionId>fad6b2e8-3066-4413-840f-528aad1b1f6c</permissionId>
             <resourceName>
                 /orgauthorities/*/items/*/contacts
             </resourceName>
         </permission>
         <role>
-            <roleId>f7cf0799-0f99-475b-a429-c7cca1349341</roleId>
+            <roleId>58b72cb3-d619-43cb-b58b-853802a09f83</roleId>
             <roleName>ROLE_TENANT_READER</roleName>
         </role>
         <role>
-            <roleId>bbbf085e-3680-4836-a525-52d6d687c1e6</roleId>
+            <roleId>16a94748-d98b-4a6d-b404-795915856dca</roleId>
             <roleName>ROLE_TENANT_READER</roleName>
         </role>
     </permissionRole>
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>0a2808d2-75df-458f-9bc0-4e16950aa8f6</permissionId>
+            <permissionId>732f97f0-6d69-47ba-9732-c1423e3227da</permissionId>
             <resourceName>notes</resourceName>
         </permission>
         <role>
-            <roleId>f7cf0799-0f99-475b-a429-c7cca1349341</roleId>
+            <roleId>58b72cb3-d619-43cb-b58b-853802a09f83</roleId>
             <roleName>ROLE_TENANT_READER</roleName>
         </role>
         <role>
-            <roleId>bbbf085e-3680-4836-a525-52d6d687c1e6</roleId>
+            <roleId>16a94748-d98b-4a6d-b404-795915856dca</roleId>
             <roleName>ROLE_TENANT_READER</roleName>
         </role>
     </permissionRole>
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>86b629b9-44ec-4b10-b87c-01cde9cf6377</permissionId>
+            <permissionId>c9f23278-e607-44c0-8b24-6e89add3ff0d</permissionId>
             <resourceName>authorization/roles</resourceName>
         </permission>
         <role>
-            <roleId>f7cf0799-0f99-475b-a429-c7cca1349341</roleId>
+            <roleId>58b72cb3-d619-43cb-b58b-853802a09f83</roleId>
             <roleName>ROLE_TENANT_READER</roleName>
         </role>
         <role>
-            <roleId>bbbf085e-3680-4836-a525-52d6d687c1e6</roleId>
+            <roleId>16a94748-d98b-4a6d-b404-795915856dca</roleId>
             <roleName>ROLE_TENANT_READER</roleName>
         </role>
     </permissionRole>
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>e3afa6b4-c32d-4188-b2b7-3b999679d194</permissionId>
+            <permissionId>bc025d36-19a5-4e36-93a1-0cbc1ccede52</permissionId>
             <resourceName>authorization/permissions</resourceName>
         </permission>
         <role>
-            <roleId>f7cf0799-0f99-475b-a429-c7cca1349341</roleId>
+            <roleId>58b72cb3-d619-43cb-b58b-853802a09f83</roleId>
             <roleName>ROLE_TENANT_READER</roleName>
         </role>
         <role>
-            <roleId>bbbf085e-3680-4836-a525-52d6d687c1e6</roleId>
+            <roleId>16a94748-d98b-4a6d-b404-795915856dca</roleId>
             <roleName>ROLE_TENANT_READER</roleName>
         </role>
     </permissionRole>
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>b3926a79-b7be-4d9f-b606-d810b580d7b3</permissionId>
+            <permissionId>461d7408-c804-49f8-af7c-7b401a8e518c</permissionId>
             <resourceName>authorization/permissions/permroles</resourceName>
         </permission>
         <role>
-            <roleId>f7cf0799-0f99-475b-a429-c7cca1349341</roleId>
+            <roleId>58b72cb3-d619-43cb-b58b-853802a09f83</roleId>
             <roleName>ROLE_TENANT_READER</roleName>
         </role>
         <role>
-            <roleId>bbbf085e-3680-4836-a525-52d6d687c1e6</roleId>
+            <roleId>16a94748-d98b-4a6d-b404-795915856dca</roleId>
             <roleName>ROLE_TENANT_READER</roleName>
         </role>
     </permissionRole>
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>1de56ea2-3074-4d86-a786-b6b7c0f138b1</permissionId>
+            <permissionId>8296e36b-f6bb-4b51-90da-f74d7b1e8472</permissionId>
             <resourceName>
                 /authorization/permissions/*/permroles/
             </resourceName>
         </permission>
         <role>
-            <roleId>f7cf0799-0f99-475b-a429-c7cca1349341</roleId>
+            <roleId>58b72cb3-d619-43cb-b58b-853802a09f83</roleId>
             <roleName>ROLE_TENANT_READER</roleName>
         </role>
         <role>
-            <roleId>bbbf085e-3680-4836-a525-52d6d687c1e6</roleId>
+            <roleId>16a94748-d98b-4a6d-b404-795915856dca</roleId>
             <roleName>ROLE_TENANT_READER</roleName>
         </role>
     </permissionRole>
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>0e199368-f16d-44d1-9d88-cc8d89331b5d</permissionId>
+            <permissionId>a1246699-d944-460b-a1c8-3559726eaaf0</permissionId>
             <resourceName>accounts/accountroles</resourceName>
         </permission>
         <role>
-            <roleId>f7cf0799-0f99-475b-a429-c7cca1349341</roleId>
+            <roleId>58b72cb3-d619-43cb-b58b-853802a09f83</roleId>
             <roleName>ROLE_TENANT_READER</roleName>
         </role>
         <role>
-            <roleId>bbbf085e-3680-4836-a525-52d6d687c1e6</roleId>
+            <roleId>16a94748-d98b-4a6d-b404-795915856dca</roleId>
             <roleName>ROLE_TENANT_READER</roleName>
         </role>
     </permissionRole>
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>6637af57-7731-4615-bcf4-4755638a41ec</permissionId>
+            <permissionId>b465403b-df78-412b-945e-da9cd7aa7fae</permissionId>
             <resourceName>
                 /accounts/*/accountroles/
             </resourceName>
         </permission>
         <role>
-            <roleId>f7cf0799-0f99-475b-a429-c7cca1349341</roleId>
+            <roleId>58b72cb3-d619-43cb-b58b-853802a09f83</roleId>
             <roleName>ROLE_TENANT_READER</roleName>
         </role>
         <role>
-            <roleId>bbbf085e-3680-4836-a525-52d6d687c1e6</roleId>
+            <roleId>16a94748-d98b-4a6d-b404-795915856dca</roleId>
             <roleName>ROLE_TENANT_READER</roleName>
         </role>
     </permissionRole>
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>617e73b5-7859-4e5f-999f-f49455b1b535</permissionId>
+            <permissionId>06fc1611-5945-4171-b0dd-24d6c09076ae</permissionId>
             <resourceName>authorization/roles/permroles</resourceName>
         </permission>
         <role>
-            <roleId>f7cf0799-0f99-475b-a429-c7cca1349341</roleId>
+            <roleId>58b72cb3-d619-43cb-b58b-853802a09f83</roleId>
             <roleName>ROLE_TENANT_READER</roleName>
         </role>
         <role>
-            <roleId>bbbf085e-3680-4836-a525-52d6d687c1e6</roleId>
+            <roleId>16a94748-d98b-4a6d-b404-795915856dca</roleId>
             <roleName>ROLE_TENANT_READER</roleName>
         </role>
     </permissionRole>
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>6db54902-aaca-4c5c-9a00-446a972877ae</permissionId>
+            <permissionId>6faa1e46-187e-404b-b6a0-36e7939e75f6</permissionId>
             <resourceName>
                 /authorization/roles/*/permroles/
             </resourceName>
         </permission>
         <role>
-            <roleId>f7cf0799-0f99-475b-a429-c7cca1349341</roleId>
+            <roleId>58b72cb3-d619-43cb-b58b-853802a09f83</roleId>
             <roleName>ROLE_TENANT_READER</roleName>
         </role>
         <role>
-            <roleId>bbbf085e-3680-4836-a525-52d6d687c1e6</roleId>
+            <roleId>16a94748-d98b-4a6d-b404-795915856dca</roleId>
             <roleName>ROLE_TENANT_READER</roleName>
         </role>
     </permissionRole>
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>8c293c6a-9869-48ba-9531-a55df3ad6226</permissionId>
+            <permissionId>dae14257-70cd-4265-bd04-d6b8df323688</permissionId>
             <resourceName>idgenerators</resourceName>
         </permission>
         <role>
-            <roleId>f7cf0799-0f99-475b-a429-c7cca1349341</roleId>
+            <roleId>58b72cb3-d619-43cb-b58b-853802a09f83</roleId>
             <roleName>ROLE_TENANT_READER</roleName>
         </role>
         <role>
-            <roleId>bbbf085e-3680-4836-a525-52d6d687c1e6</roleId>
+            <roleId>16a94748-d98b-4a6d-b404-795915856dca</roleId>
             <roleName>ROLE_TENANT_READER</roleName>
         </role>
     </permissionRole>
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>26ada9c0-706a-4644-ba58-a65511dc96c2</permissionId>
+            <permissionId>ef945684-dd18-47cb-9820-0e92d5dbfe51</permissionId>
             <resourceName>id</resourceName>
         </permission>
         <role>
-            <roleId>f7cf0799-0f99-475b-a429-c7cca1349341</roleId>
+            <roleId>58b72cb3-d619-43cb-b58b-853802a09f83</roleId>
             <roleName>ROLE_TENANT_READER</roleName>
         </role>
         <role>
-            <roleId>bbbf085e-3680-4836-a525-52d6d687c1e6</roleId>
+            <roleId>16a94748-d98b-4a6d-b404-795915856dca</roleId>
             <roleName>ROLE_TENANT_READER</roleName>
         </role>
     </permissionRole>
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>f6f7ff93-8f5c-4632-bde0-14a6608b3db9</permissionId>
+            <permissionId>36ae518f-5dc4-4842-9cfc-88f85adcfc66</permissionId>
             <resourceName>
                 /idgenerators/*/ids
             </resourceName>
         </permission>
         <role>
-            <roleId>f7cf0799-0f99-475b-a429-c7cca1349341</roleId>
+            <roleId>58b72cb3-d619-43cb-b58b-853802a09f83</roleId>
             <roleName>ROLE_TENANT_READER</roleName>
         </role>
         <role>
-            <roleId>bbbf085e-3680-4836-a525-52d6d687c1e6</roleId>
+            <roleId>16a94748-d98b-4a6d-b404-795915856dca</roleId>
             <roleName>ROLE_TENANT_READER</roleName>
         </role>
     </permissionRole>
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>fccb3c13-19ba-4042-9800-bcb41d6401cb</permissionId>
+            <permissionId>fb612d1d-8bc1-4120-9540-b7923f34f0e8</permissionId>
             <resourceName>collectionobjects</resourceName>
         </permission>
         <role>
-            <roleId>f7cf0799-0f99-475b-a429-c7cca1349341</roleId>
+            <roleId>58b72cb3-d619-43cb-b58b-853802a09f83</roleId>
             <roleName>ROLE_TENANT_READER</roleName>
         </role>
         <role>
-            <roleId>bbbf085e-3680-4836-a525-52d6d687c1e6</roleId>
+            <roleId>16a94748-d98b-4a6d-b404-795915856dca</roleId>
             <roleName>ROLE_TENANT_READER</roleName>
         </role>
     </permissionRole>
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>ed79d51d-e0b2-480d-8794-068e761680db</permissionId>
+            <permissionId>c898724b-9b3e-4195-a64f-f115baa5b195</permissionId>
             <resourceName>
                 /collectionobjects/*/authorityrefs/
             </resourceName>
         </permission>
         <role>
-            <roleId>f7cf0799-0f99-475b-a429-c7cca1349341</roleId>
+            <roleId>58b72cb3-d619-43cb-b58b-853802a09f83</roleId>
             <roleName>ROLE_TENANT_READER</roleName>
         </role>
         <role>
-            <roleId>bbbf085e-3680-4836-a525-52d6d687c1e6</roleId>
+            <roleId>16a94748-d98b-4a6d-b404-795915856dca</roleId>
             <roleName>ROLE_TENANT_READER</roleName>
         </role>
     </permissionRole>
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>096f86d8-f09e-4b39-a54a-47b0c65ff6a1</permissionId>
+            <permissionId>2679e06e-6d70-4dc6-aa4e-0923d65f0be8</permissionId>
             <resourceName>intakes</resourceName>
         </permission>
         <role>
-            <roleId>f7cf0799-0f99-475b-a429-c7cca1349341</roleId>
+            <roleId>58b72cb3-d619-43cb-b58b-853802a09f83</roleId>
             <roleName>ROLE_TENANT_READER</roleName>
         </role>
         <role>
-            <roleId>bbbf085e-3680-4836-a525-52d6d687c1e6</roleId>
+            <roleId>16a94748-d98b-4a6d-b404-795915856dca</roleId>
             <roleName>ROLE_TENANT_READER</roleName>
         </role>
     </permissionRole>
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>7c59900c-0ae1-4aa9-b673-cee98ddaa423</permissionId>
+            <permissionId>41be903c-20a8-468e-b23e-545784c55120</permissionId>
             <resourceName>
                 /intakes/*/authorityrefs/
             </resourceName>
         </permission>
         <role>
-            <roleId>f7cf0799-0f99-475b-a429-c7cca1349341</roleId>
+            <roleId>58b72cb3-d619-43cb-b58b-853802a09f83</roleId>
             <roleName>ROLE_TENANT_READER</roleName>
         </role>
         <role>
-            <roleId>bbbf085e-3680-4836-a525-52d6d687c1e6</roleId>
+            <roleId>16a94748-d98b-4a6d-b404-795915856dca</roleId>
             <roleName>ROLE_TENANT_READER</roleName>
         </role>
     </permissionRole>
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>b21411fc-abe3-42ed-ab7f-5a406d301a9e</permissionId>
+            <permissionId>b83347b9-62f9-4d12-ab88-67ee25544482</permissionId>
             <resourceName>loansin</resourceName>
         </permission>
         <role>
-            <roleId>f7cf0799-0f99-475b-a429-c7cca1349341</roleId>
+            <roleId>58b72cb3-d619-43cb-b58b-853802a09f83</roleId>
             <roleName>ROLE_TENANT_READER</roleName>
         </role>
         <role>
-            <roleId>bbbf085e-3680-4836-a525-52d6d687c1e6</roleId>
+            <roleId>16a94748-d98b-4a6d-b404-795915856dca</roleId>
             <roleName>ROLE_TENANT_READER</roleName>
         </role>
     </permissionRole>
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>c25b5a9e-1b2b-4793-b9f0-b2a75eb0371e</permissionId>
+            <permissionId>af8adb6c-e517-4f76-aefc-3f98b16eaca7</permissionId>
             <resourceName>
                 /loansin/*/authorityrefs/
             </resourceName>
         </permission>
         <role>
-            <roleId>f7cf0799-0f99-475b-a429-c7cca1349341</roleId>
+            <roleId>58b72cb3-d619-43cb-b58b-853802a09f83</roleId>
             <roleName>ROLE_TENANT_READER</roleName>
         </role>
         <role>
-            <roleId>bbbf085e-3680-4836-a525-52d6d687c1e6</roleId>
+            <roleId>16a94748-d98b-4a6d-b404-795915856dca</roleId>
             <roleName>ROLE_TENANT_READER</roleName>
         </role>
     </permissionRole>
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>a78c8a08-8160-48dc-8a87-fcb2dfd7bd1a</permissionId>
+            <permissionId>12ad496e-0ddd-491c-8fc6-bdd95180700b</permissionId>
             <resourceName>loansout</resourceName>
         </permission>
         <role>
-            <roleId>f7cf0799-0f99-475b-a429-c7cca1349341</roleId>
+            <roleId>58b72cb3-d619-43cb-b58b-853802a09f83</roleId>
             <roleName>ROLE_TENANT_READER</roleName>
         </role>
         <role>
-            <roleId>bbbf085e-3680-4836-a525-52d6d687c1e6</roleId>
+            <roleId>16a94748-d98b-4a6d-b404-795915856dca</roleId>
             <roleName>ROLE_TENANT_READER</roleName>
         </role>
     </permissionRole>
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>b9197d1c-508d-4202-99ad-c510495a0950</permissionId>
+            <permissionId>9ad3829d-6583-4906-bf8d-6b098246d154</permissionId>
             <resourceName>
                 /loansout/*/authorityrefs/
             </resourceName>
         </permission>
         <role>
-            <roleId>f7cf0799-0f99-475b-a429-c7cca1349341</roleId>
+            <roleId>58b72cb3-d619-43cb-b58b-853802a09f83</roleId>
             <roleName>ROLE_TENANT_READER</roleName>
         </role>
         <role>
-            <roleId>bbbf085e-3680-4836-a525-52d6d687c1e6</roleId>
+            <roleId>16a94748-d98b-4a6d-b404-795915856dca</roleId>
             <roleName>ROLE_TENANT_READER</roleName>
         </role>
     </permissionRole>
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>9d741d9a-4730-413f-8650-c42f808d664b</permissionId>
+            <permissionId>9769f7ea-7ecd-413d-814d-3a15701b9be0</permissionId>
             <resourceName>movements</resourceName>
         </permission>
         <role>
-            <roleId>f7cf0799-0f99-475b-a429-c7cca1349341</roleId>
+            <roleId>58b72cb3-d619-43cb-b58b-853802a09f83</roleId>
             <roleName>ROLE_TENANT_READER</roleName>
         </role>
         <role>
-            <roleId>bbbf085e-3680-4836-a525-52d6d687c1e6</roleId>
+            <roleId>16a94748-d98b-4a6d-b404-795915856dca</roleId>
             <roleName>ROLE_TENANT_READER</roleName>
         </role>
     </permissionRole>
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>b1f6df3e-1f08-41a9-8d0c-c09d8e46bbe6</permissionId>
+            <permissionId>dc08970a-11ba-48bc-a0fc-f3584757844b</permissionId>
             <resourceName>
                 /movements/*/authorityrefs/
             </resourceName>
         </permission>
         <role>
-            <roleId>f7cf0799-0f99-475b-a429-c7cca1349341</roleId>
+            <roleId>58b72cb3-d619-43cb-b58b-853802a09f83</roleId>
             <roleName>ROLE_TENANT_READER</roleName>
         </role>
         <role>
-            <roleId>bbbf085e-3680-4836-a525-52d6d687c1e6</roleId>
+            <roleId>16a94748-d98b-4a6d-b404-795915856dca</roleId>
             <roleName>ROLE_TENANT_READER</roleName>
         </role>
     </permissionRole>
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>b273a380-4c2e-4440-a15f-451dbe35723c</permissionId>
+            <permissionId>0cc45625-5602-4847-80f2-138410497249</permissionId>
             <resourceName>vocabularies</resourceName>
         </permission>
         <role>
-            <roleId>f7cf0799-0f99-475b-a429-c7cca1349341</roleId>
+            <roleId>58b72cb3-d619-43cb-b58b-853802a09f83</roleId>
             <roleName>ROLE_TENANT_READER</roleName>
         </role>
         <role>
-            <roleId>bbbf085e-3680-4836-a525-52d6d687c1e6</roleId>
+            <roleId>16a94748-d98b-4a6d-b404-795915856dca</roleId>
             <roleName>ROLE_TENANT_READER</roleName>
         </role>
     </permissionRole>
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>7332cffe-7b60-4b37-905b-63ddec4d5037</permissionId>
+            <permissionId>67254a46-3c03-458d-9cd8-3ac161a99b54</permissionId>
             <resourceName>vocabularyitems</resourceName>
         </permission>
         <role>
-            <roleId>f7cf0799-0f99-475b-a429-c7cca1349341</roleId>
+            <roleId>58b72cb3-d619-43cb-b58b-853802a09f83</roleId>
             <roleName>ROLE_TENANT_READER</roleName>
         </role>
         <role>
-            <roleId>bbbf085e-3680-4836-a525-52d6d687c1e6</roleId>
+            <roleId>16a94748-d98b-4a6d-b404-795915856dca</roleId>
             <roleName>ROLE_TENANT_READER</roleName>
         </role>
     </permissionRole>
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>fd3141a6-8898-4da1-a08b-328ea9e9f406</permissionId>
+            <permissionId>57faed1b-d4d3-4db7-b54f-2806827fc52a</permissionId>
             <resourceName>
                 /vocabularies/*/items/
             </resourceName>
         </permission>
         <role>
-            <roleId>f7cf0799-0f99-475b-a429-c7cca1349341</roleId>
+            <roleId>58b72cb3-d619-43cb-b58b-853802a09f83</roleId>
             <roleName>ROLE_TENANT_READER</roleName>
         </role>
         <role>
-            <roleId>bbbf085e-3680-4836-a525-52d6d687c1e6</roleId>
+            <roleId>16a94748-d98b-4a6d-b404-795915856dca</roleId>
             <roleName>ROLE_TENANT_READER</roleName>
         </role>
     </permissionRole>
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>be1c5032-0c58-40ff-ba26-96e151c42c98</permissionId>
+            <permissionId>843f8ef9-2dda-48db-ab9b-de85ef4e7aa5</permissionId>
             <resourceName>orgauthorities</resourceName>
         </permission>
         <role>
-            <roleId>f7cf0799-0f99-475b-a429-c7cca1349341</roleId>
+            <roleId>58b72cb3-d619-43cb-b58b-853802a09f83</roleId>
             <roleName>ROLE_TENANT_READER</roleName>
         </role>
         <role>
-            <roleId>bbbf085e-3680-4836-a525-52d6d687c1e6</roleId>
+            <roleId>16a94748-d98b-4a6d-b404-795915856dca</roleId>
             <roleName>ROLE_TENANT_READER</roleName>
         </role>
     </permissionRole>
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>c03fbda9-af3f-493a-9ba6-4ff863792230</permissionId>
+            <permissionId>20a5fca1-1642-41bf-825e-04e22f9268c6</permissionId>
             <resourceName>
                 /orgauthorities/*/items/*/authorityrefs/
             </resourceName>
         </permission>
         <role>
-            <roleId>f7cf0799-0f99-475b-a429-c7cca1349341</roleId>
+            <roleId>58b72cb3-d619-43cb-b58b-853802a09f83</roleId>
             <roleName>ROLE_TENANT_READER</roleName>
         </role>
         <role>
-            <roleId>bbbf085e-3680-4836-a525-52d6d687c1e6</roleId>
+            <roleId>16a94748-d98b-4a6d-b404-795915856dca</roleId>
             <roleName>ROLE_TENANT_READER</roleName>
         </role>
     </permissionRole>
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>d8b8989d-a3ec-4427-8623-58450124b524</permissionId>
+            <permissionId>00a752c8-4d18-40bd-8f2b-36137516ea5a</permissionId>
             <resourceName>organizations</resourceName>
         </permission>
         <role>
-            <roleId>f7cf0799-0f99-475b-a429-c7cca1349341</roleId>
+            <roleId>58b72cb3-d619-43cb-b58b-853802a09f83</roleId>
             <roleName>ROLE_TENANT_READER</roleName>
         </role>
         <role>
-            <roleId>bbbf085e-3680-4836-a525-52d6d687c1e6</roleId>
+            <roleId>16a94748-d98b-4a6d-b404-795915856dca</roleId>
             <roleName>ROLE_TENANT_READER</roleName>
         </role>
     </permissionRole>
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>8fa48282-118c-4772-a9b5-ecad85d87567</permissionId>
+            <permissionId>702522ff-f402-4ea4-9461-97f4d219e38e</permissionId>
             <resourceName>
                 /orgauthorities/*/items/
             </resourceName>
         </permission>
         <role>
-            <roleId>f7cf0799-0f99-475b-a429-c7cca1349341</roleId>
+            <roleId>58b72cb3-d619-43cb-b58b-853802a09f83</roleId>
             <roleName>ROLE_TENANT_READER</roleName>
         </role>
         <role>
-            <roleId>bbbf085e-3680-4836-a525-52d6d687c1e6</roleId>
+            <roleId>16a94748-d98b-4a6d-b404-795915856dca</roleId>
             <roleName>ROLE_TENANT_READER</roleName>
         </role>
     </permissionRole>
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>132b61b6-03df-42d9-84fd-61be2a1b6dc5</permissionId>
+            <permissionId>8edf2336-8012-4e82-87de-e259984c87e9</permissionId>
             <resourceName>
                 /orgauthorities/*/items/*/refobjs
             </resourceName>
         </permission>
         <role>
-            <roleId>f7cf0799-0f99-475b-a429-c7cca1349341</roleId>
+            <roleId>58b72cb3-d619-43cb-b58b-853802a09f83</roleId>
             <roleName>ROLE_TENANT_READER</roleName>
         </role>
         <role>
-            <roleId>bbbf085e-3680-4836-a525-52d6d687c1e6</roleId>
+            <roleId>16a94748-d98b-4a6d-b404-795915856dca</roleId>
             <roleName>ROLE_TENANT_READER</roleName>
         </role>
     </permissionRole>
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>75e53342-f12e-4aa7-a4fb-56fc3b681fa6</permissionId>
+            <permissionId>aaaa4a45-e84f-4fea-8a08-e96161296678</permissionId>
             <resourceName>personauthorities</resourceName>
         </permission>
         <role>
-            <roleId>f7cf0799-0f99-475b-a429-c7cca1349341</roleId>
+            <roleId>58b72cb3-d619-43cb-b58b-853802a09f83</roleId>
             <roleName>ROLE_TENANT_READER</roleName>
         </role>
         <role>
-            <roleId>bbbf085e-3680-4836-a525-52d6d687c1e6</roleId>
+            <roleId>16a94748-d98b-4a6d-b404-795915856dca</roleId>
             <roleName>ROLE_TENANT_READER</roleName>
         </role>
     </permissionRole>
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>d7b0b6bc-1fff-41f5-b4b8-a2b0ea975c64</permissionId>
+            <permissionId>f82367c7-8c63-4407-89b5-52cd6885fbc1</permissionId>
             <resourceName>
                 /personauthorities/*/items/
             </resourceName>
         </permission>
         <role>
-            <roleId>f7cf0799-0f99-475b-a429-c7cca1349341</roleId>
+            <roleId>58b72cb3-d619-43cb-b58b-853802a09f83</roleId>
             <roleName>ROLE_TENANT_READER</roleName>
         </role>
         <role>
-            <roleId>bbbf085e-3680-4836-a525-52d6d687c1e6</roleId>
+            <roleId>16a94748-d98b-4a6d-b404-795915856dca</roleId>
             <roleName>ROLE_TENANT_READER</roleName>
         </role>
     </permissionRole>
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>e5173476-4cc3-4461-a6f7-ba9031cef9c6</permissionId>
+            <permissionId>18cb3027-92ff-40a9-8257-67565cc0f314</permissionId>
             <resourceName>
                 /personauthorities/*/items/*/refobjs
             </resourceName>
         </permission>
         <role>
-            <roleId>f7cf0799-0f99-475b-a429-c7cca1349341</roleId>
+            <roleId>58b72cb3-d619-43cb-b58b-853802a09f83</roleId>
             <roleName>ROLE_TENANT_READER</roleName>
         </role>
         <role>
-            <roleId>bbbf085e-3680-4836-a525-52d6d687c1e6</roleId>
+            <roleId>16a94748-d98b-4a6d-b404-795915856dca</roleId>
             <roleName>ROLE_TENANT_READER</roleName>
         </role>
     </permissionRole>
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>c9a5be9a-5278-4593-b490-8fd2ff965609</permissionId>
+            <permissionId>acc3b715-ca38-479c-a7f6-91c9d52f4d51</permissionId>
             <resourceName>persons</resourceName>
         </permission>
         <role>
-            <roleId>f7cf0799-0f99-475b-a429-c7cca1349341</roleId>
+            <roleId>58b72cb3-d619-43cb-b58b-853802a09f83</roleId>
             <roleName>ROLE_TENANT_READER</roleName>
         </role>
         <role>
-            <roleId>bbbf085e-3680-4836-a525-52d6d687c1e6</roleId>
+            <roleId>16a94748-d98b-4a6d-b404-795915856dca</roleId>
             <roleName>ROLE_TENANT_READER</roleName>
         </role>
     </permissionRole>
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>aa455324-692a-4b4b-b588-1d1488c3600e</permissionId>
+            <permissionId>6f951805-2487-4dcd-904a-b91826a3652f</permissionId>
             <resourceName>
                 /personauthorities/*/items/
             </resourceName>
         </permission>
         <role>
-            <roleId>f7cf0799-0f99-475b-a429-c7cca1349341</roleId>
+            <roleId>58b72cb3-d619-43cb-b58b-853802a09f83</roleId>
             <roleName>ROLE_TENANT_READER</roleName>
         </role>
         <role>
-            <roleId>bbbf085e-3680-4836-a525-52d6d687c1e6</roleId>
+            <roleId>16a94748-d98b-4a6d-b404-795915856dca</roleId>
             <roleName>ROLE_TENANT_READER</roleName>
         </role>
     </permissionRole>
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>61775707-4f82-4d9c-accb-b2553b51c991</permissionId>
+            <permissionId>31befe05-de12-41be-9ba2-87f8389c0505</permissionId>
             <resourceName>locationauthorities</resourceName>
         </permission>
         <role>
-            <roleId>f7cf0799-0f99-475b-a429-c7cca1349341</roleId>
+            <roleId>58b72cb3-d619-43cb-b58b-853802a09f83</roleId>
             <roleName>ROLE_TENANT_READER</roleName>
         </role>
         <role>
-            <roleId>bbbf085e-3680-4836-a525-52d6d687c1e6</roleId>
+            <roleId>16a94748-d98b-4a6d-b404-795915856dca</roleId>
             <roleName>ROLE_TENANT_READER</roleName>
         </role>
     </permissionRole>
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>d301837e-0da3-4c45-ad18-0c05e095277e</permissionId>
+            <permissionId>c1e2d3d2-6379-4d04-8246-45c77532979b</permissionId>
             <resourceName>
                 /locationauthorities/*/items/
             </resourceName>
         </permission>
         <role>
-            <roleId>f7cf0799-0f99-475b-a429-c7cca1349341</roleId>
+            <roleId>58b72cb3-d619-43cb-b58b-853802a09f83</roleId>
             <roleName>ROLE_TENANT_READER</roleName>
         </role>
         <role>
-            <roleId>bbbf085e-3680-4836-a525-52d6d687c1e6</roleId>
+            <roleId>16a94748-d98b-4a6d-b404-795915856dca</roleId>
             <roleName>ROLE_TENANT_READER</roleName>
         </role>
     </permissionRole>
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>4d562791-ae17-4c2c-a9fa-45fd2b9ccb92</permissionId>
+            <permissionId>67b2cad8-9589-4843-9363-7442b6b9cd5f</permissionId>
             <resourceName>locations</resourceName>
         </permission>
         <role>
-            <roleId>f7cf0799-0f99-475b-a429-c7cca1349341</roleId>
+            <roleId>58b72cb3-d619-43cb-b58b-853802a09f83</roleId>
             <roleName>ROLE_TENANT_READER</roleName>
         </role>
         <role>
-            <roleId>bbbf085e-3680-4836-a525-52d6d687c1e6</roleId>
+            <roleId>16a94748-d98b-4a6d-b404-795915856dca</roleId>
             <roleName>ROLE_TENANT_READER</roleName>
         </role>
     </permissionRole>
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>46383746-c96b-4df8-9964-20b63adcc821</permissionId>
+            <permissionId>1b02adb2-49d7-4f21-a444-6af028149e03</permissionId>
             <resourceName>acquisitions</resourceName>
         </permission>
         <role>
-            <roleId>f7cf0799-0f99-475b-a429-c7cca1349341</roleId>
+            <roleId>58b72cb3-d619-43cb-b58b-853802a09f83</roleId>
             <roleName>ROLE_TENANT_READER</roleName>
         </role>
         <role>
-            <roleId>bbbf085e-3680-4836-a525-52d6d687c1e6</roleId>
+            <roleId>16a94748-d98b-4a6d-b404-795915856dca</roleId>
             <roleName>ROLE_TENANT_READER</roleName>
         </role>
     </permissionRole>
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>f98a8c6e-5b28-44c7-a7c6-cb58b450b496</permissionId>
+            <permissionId>b94ee08f-8d1d-48e7-ba41-603c79a5e21c</permissionId>
             <resourceName>
                 /acquisitions/*/authorityrefs/
             </resourceName>
         </permission>
         <role>
-            <roleId>f7cf0799-0f99-475b-a429-c7cca1349341</roleId>
+            <roleId>58b72cb3-d619-43cb-b58b-853802a09f83</roleId>
             <roleName>ROLE_TENANT_READER</roleName>
         </role>
         <role>
-            <roleId>bbbf085e-3680-4836-a525-52d6d687c1e6</roleId>
+            <roleId>16a94748-d98b-4a6d-b404-795915856dca</roleId>
             <roleName>ROLE_TENANT_READER</roleName>
         </role>
     </permissionRole>
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>b676b0b8-5931-4241-a498-18bc171c7b3b</permissionId>
+            <permissionId>2d10ecd1-2f03-476b-985a-cca3c96544cc</permissionId>
             <resourceName>relations</resourceName>
         </permission>
         <role>
-            <roleId>f7cf0799-0f99-475b-a429-c7cca1349341</roleId>
+            <roleId>58b72cb3-d619-43cb-b58b-853802a09f83</roleId>
+            <roleName>ROLE_TENANT_READER</roleName>
+        </role>
+        <role>
+            <roleId>16a94748-d98b-4a6d-b404-795915856dca</roleId>
+            <roleName>ROLE_TENANT_READER</roleName>
+        </role>
+    </permissionRole>
+    <permissionRole>
+        <subject>ROLE</subject>
+        <permission>
+            <permissionId>df70e266-1ee9-44d7-89d4-86d1e9aee2c4</permissionId>
+            <resourceName>
+                /relations/object/*
+            </resourceName>
+        </permission>
+        <role>
+            <roleId>58b72cb3-d619-43cb-b58b-853802a09f83</roleId>
+            <roleName>ROLE_TENANT_READER</roleName>
+        </role>
+        <role>
+            <roleId>16a94748-d98b-4a6d-b404-795915856dca</roleId>
+            <roleName>ROLE_TENANT_READER</roleName>
+        </role>
+    </permissionRole>
+    <permissionRole>
+        <subject>ROLE</subject>
+        <permission>
+            <permissionId>13093d51-e8ce-4682-aa36-7229b3c21b80</permissionId>
+            <resourceName>
+                /relations/object/*/type/*
+            </resourceName>
+        </permission>
+        <role>
+            <roleId>58b72cb3-d619-43cb-b58b-853802a09f83</roleId>
+            <roleName>ROLE_TENANT_READER</roleName>
+        </role>
+        <role>
+            <roleId>16a94748-d98b-4a6d-b404-795915856dca</roleId>
+            <roleName>ROLE_TENANT_READER</roleName>
+        </role>
+    </permissionRole>
+    <permissionRole>
+        <subject>ROLE</subject>
+        <permission>
+            <permissionId>76fdf35a-d706-4996-be15-250ac77ee770</permissionId>
+            <resourceName>
+                /relations/subject/*
+            </resourceName>
+        </permission>
+        <role>
+            <roleId>58b72cb3-d619-43cb-b58b-853802a09f83</roleId>
+            <roleName>ROLE_TENANT_READER</roleName>
+        </role>
+        <role>
+            <roleId>16a94748-d98b-4a6d-b404-795915856dca</roleId>
+            <roleName>ROLE_TENANT_READER</roleName>
+        </role>
+    </permissionRole>
+    <permissionRole>
+        <subject>ROLE</subject>
+        <permission>
+            <permissionId>f0f7a397-94b7-4b7d-a6ea-7a4081853251</permissionId>
+            <resourceName>
+                /relations/subject/*/type/*
+            </resourceName>
+        </permission>
+        <role>
+            <roleId>58b72cb3-d619-43cb-b58b-853802a09f83</roleId>
+            <roleName>ROLE_TENANT_READER</roleName>
+        </role>
+        <role>
+            <roleId>16a94748-d98b-4a6d-b404-795915856dca</roleId>
+            <roleName>ROLE_TENANT_READER</roleName>
+        </role>
+    </permissionRole>
+    <permissionRole>
+        <subject>ROLE</subject>
+        <permission>
+            <permissionId>32e05c9d-cf05-44d5-ada2-e7d73dc0e71e</permissionId>
+            <resourceName>
+                /relations/subject/*/type/*/object/*
+            </resourceName>
+        </permission>
+        <role>
+            <roleId>58b72cb3-d619-43cb-b58b-853802a09f83</roleId>
+            <roleName>ROLE_TENANT_READER</roleName>
+        </role>
+        <role>
+            <roleId>16a94748-d98b-4a6d-b404-795915856dca</roleId>
+            <roleName>ROLE_TENANT_READER</roleName>
+        </role>
+    </permissionRole>
+    <permissionRole>
+        <subject>ROLE</subject>
+        <permission>
+            <permissionId>a37297d0-a754-4864-9959-43e6c37efbc9</permissionId>
+            <resourceName>
+                /relations/type/*
+            </resourceName>
+        </permission>
+        <role>
+            <roleId>58b72cb3-d619-43cb-b58b-853802a09f83</roleId>
+            <roleName>ROLE_TENANT_READER</roleName>
+        </role>
+        <role>
+            <roleId>16a94748-d98b-4a6d-b404-795915856dca</roleId>
+            <roleName>ROLE_TENANT_READER</roleName>
+        </role>
+    </permissionRole>
+    <permissionRole>
+        <subject>ROLE</subject>
+        <permission>
+            <permissionId>485a4d84-77be-497d-9f07-c4927cc820a5</permissionId>
+            <resourceName>
+                /relations/type/*/object/*
+            </resourceName>
+        </permission>
+        <role>
+            <roleId>58b72cb3-d619-43cb-b58b-853802a09f83</roleId>
+            <roleName>ROLE_TENANT_READER</roleName>
+        </role>
+        <role>
+            <roleId>16a94748-d98b-4a6d-b404-795915856dca</roleId>
+            <roleName>ROLE_TENANT_READER</roleName>
+        </role>
+    </permissionRole>
+    <permissionRole>
+        <subject>ROLE</subject>
+        <permission>
+            <permissionId>cebc18a7-d99e-4594-91f1-b85f208a689a</permissionId>
+            <resourceName>
+                /relations/type/*/subject/*
+            </resourceName>
+        </permission>
+        <role>
+            <roleId>58b72cb3-d619-43cb-b58b-853802a09f83</roleId>
             <roleName>ROLE_TENANT_READER</roleName>
         </role>
         <role>
-            <roleId>bbbf085e-3680-4836-a525-52d6d687c1e6</roleId>
+            <roleId>16a94748-d98b-4a6d-b404-795915856dca</roleId>
             <roleName>ROLE_TENANT_READER</roleName>
         </role>
     </permissionRole>
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>57c3bb71-9214-4735-a288-f3c61510f9f9</permissionId>
+            <permissionId>bb0df418-4362-4907-99e0-b62fe5d36f4d</permissionId>
             <resourceName>
-                relations/subject/*/type/*/object/*
+                /relations/type/*/subject/*/object/*
             </resourceName>
         </permission>
         <role>
-            <roleId>f7cf0799-0f99-475b-a429-c7cca1349341</roleId>
+            <roleId>58b72cb3-d619-43cb-b58b-853802a09f83</roleId>
             <roleName>ROLE_TENANT_READER</roleName>
         </role>
         <role>
-            <roleId>bbbf085e-3680-4836-a525-52d6d687c1e6</roleId>
+            <roleId>16a94748-d98b-4a6d-b404-795915856dca</roleId>
             <roleName>ROLE_TENANT_READER</roleName>
         </role>
     </permissionRole>
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>dba15ac5-babc-489d-8adf-63bd9995f178</permissionId>
+            <permissionId>52843f9e-a2c8-408a-8027-a7448e95f2ea</permissionId>
             <resourceName>accounts</resourceName>
         </permission>
         <role>
-            <roleId>f7cf0799-0f99-475b-a429-c7cca1349341</roleId>
+            <roleId>58b72cb3-d619-43cb-b58b-853802a09f83</roleId>
             <roleName>ROLE_TENANT_READER</roleName>
         </role>
         <role>
-            <roleId>bbbf085e-3680-4836-a525-52d6d687c1e6</roleId>
+            <roleId>16a94748-d98b-4a6d-b404-795915856dca</roleId>
             <roleName>ROLE_TENANT_READER</roleName>
         </role>
     </permissionRole>
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>eb056ced-e0a9-4e1c-9cdc-bb16db69f951</permissionId>
+            <permissionId>cdbd23ba-c5c4-4d40-9091-794845a271c4</permissionId>
             <resourceName>dimensions</resourceName>
         </permission>
         <role>
-            <roleId>f7cf0799-0f99-475b-a429-c7cca1349341</roleId>
+            <roleId>58b72cb3-d619-43cb-b58b-853802a09f83</roleId>
             <roleName>ROLE_TENANT_READER</roleName>
         </role>
         <role>
-            <roleId>bbbf085e-3680-4836-a525-52d6d687c1e6</roleId>
+            <roleId>16a94748-d98b-4a6d-b404-795915856dca</roleId>
             <roleName>ROLE_TENANT_READER</roleName>
         </role>
     </permissionRole>
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>5cbd95b4-aaea-4872-9826-d6d8f2f1b2be</permissionId>
+            <permissionId>9d5ac017-8860-4681-a90a-0383c2f13774</permissionId>
             <resourceName>contacts</resourceName>
         </permission>
         <role>
-            <roleId>f7cf0799-0f99-475b-a429-c7cca1349341</roleId>
+            <roleId>58b72cb3-d619-43cb-b58b-853802a09f83</roleId>
             <roleName>ROLE_TENANT_READER</roleName>
         </role>
         <role>
-            <roleId>bbbf085e-3680-4836-a525-52d6d687c1e6</roleId>
+            <roleId>16a94748-d98b-4a6d-b404-795915856dca</roleId>
             <roleName>ROLE_TENANT_READER</roleName>
         </role>
     </permissionRole>
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>5fb27767-ecd5-47d0-b84f-781da0801244</permissionId>
+            <permissionId>356e6cad-6da4-4c22-9f81-87fd9c9ec307</permissionId>
             <resourceName>
                 /personauthorities/*/items/*/contacts
             </resourceName>
         </permission>
         <role>
-            <roleId>f7cf0799-0f99-475b-a429-c7cca1349341</roleId>
+            <roleId>58b72cb3-d619-43cb-b58b-853802a09f83</roleId>
             <roleName>ROLE_TENANT_READER</roleName>
         </role>
         <role>
-            <roleId>bbbf085e-3680-4836-a525-52d6d687c1e6</roleId>
+            <roleId>16a94748-d98b-4a6d-b404-795915856dca</roleId>
             <roleName>ROLE_TENANT_READER</roleName>
         </role>
     </permissionRole>
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>444c92c4-20e5-407b-bcd7-e2a531392ff5</permissionId>
+            <permissionId>d5f8afc2-0f2a-46b8-a883-a4254d5ab2fb</permissionId>
             <resourceName>
                 /orgauthorities/*/items/*/contacts
             </resourceName>
         </permission>
         <role>
-            <roleId>f7cf0799-0f99-475b-a429-c7cca1349341</roleId>
+            <roleId>58b72cb3-d619-43cb-b58b-853802a09f83</roleId>
             <roleName>ROLE_TENANT_READER</roleName>
         </role>
         <role>
-            <roleId>bbbf085e-3680-4836-a525-52d6d687c1e6</roleId>
+            <roleId>16a94748-d98b-4a6d-b404-795915856dca</roleId>
             <roleName>ROLE_TENANT_READER</roleName>
         </role>
     </permissionRole>
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>e7df87bc-5069-4427-9316-c3365fe42895</permissionId>
+            <permissionId>14c37f47-7f5d-4a97-af84-68ce2339e88b</permissionId>
             <resourceName>notes</resourceName>
         </permission>
         <role>
-            <roleId>f7cf0799-0f99-475b-a429-c7cca1349341</roleId>
+            <roleId>58b72cb3-d619-43cb-b58b-853802a09f83</roleId>
             <roleName>ROLE_TENANT_READER</roleName>
         </role>
         <role>
-            <roleId>bbbf085e-3680-4836-a525-52d6d687c1e6</roleId>
+            <roleId>16a94748-d98b-4a6d-b404-795915856dca</roleId>
             <roleName>ROLE_TENANT_READER</roleName>
         </role>
     </permissionRole>
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>a40a21ab-628c-451e-8cde-b12fdbcb68db</permissionId>
+            <permissionId>6bf45114-e6e6-4f7a-8c6f-6b536fcb3be2</permissionId>
             <resourceName>authorization/roles</resourceName>
         </permission>
         <role>
-            <roleId>f7cf0799-0f99-475b-a429-c7cca1349341</roleId>
+            <roleId>58b72cb3-d619-43cb-b58b-853802a09f83</roleId>
             <roleName>ROLE_TENANT_READER</roleName>
         </role>
         <role>
-            <roleId>bbbf085e-3680-4836-a525-52d6d687c1e6</roleId>
+            <roleId>16a94748-d98b-4a6d-b404-795915856dca</roleId>
             <roleName>ROLE_TENANT_READER</roleName>
         </role>
     </permissionRole>
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>2395cbea-d6bc-474f-a80a-a9d41c32691f</permissionId>
+            <permissionId>6dfc1721-878f-4f4f-afb5-2d068f54bb57</permissionId>
             <resourceName>authorization/permissions</resourceName>
         </permission>
         <role>
-            <roleId>f7cf0799-0f99-475b-a429-c7cca1349341</roleId>
+            <roleId>58b72cb3-d619-43cb-b58b-853802a09f83</roleId>
             <roleName>ROLE_TENANT_READER</roleName>
         </role>
         <role>
-            <roleId>bbbf085e-3680-4836-a525-52d6d687c1e6</roleId>
+            <roleId>16a94748-d98b-4a6d-b404-795915856dca</roleId>
             <roleName>ROLE_TENANT_READER</roleName>
         </role>
     </permissionRole>
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>a72da2cd-549a-45e5-a3c0-5352eef10be0</permissionId>
+            <permissionId>3ae19351-27e2-467a-8c71-4333e509833d</permissionId>
             <resourceName>authorization/permissions/permroles</resourceName>
         </permission>
         <role>
-            <roleId>f7cf0799-0f99-475b-a429-c7cca1349341</roleId>
+            <roleId>58b72cb3-d619-43cb-b58b-853802a09f83</roleId>
             <roleName>ROLE_TENANT_READER</roleName>
         </role>
         <role>
-            <roleId>bbbf085e-3680-4836-a525-52d6d687c1e6</roleId>
+            <roleId>16a94748-d98b-4a6d-b404-795915856dca</roleId>
             <roleName>ROLE_TENANT_READER</roleName>
         </role>
     </permissionRole>
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>2a8f0469-3341-4228-9338-dfd9d46784a9</permissionId>
+            <permissionId>2198327c-6e18-42ad-91a6-c965418cf21b</permissionId>
             <resourceName>
                 /authorization/permissions/*/permroles/
             </resourceName>
         </permission>
         <role>
-            <roleId>f7cf0799-0f99-475b-a429-c7cca1349341</roleId>
+            <roleId>58b72cb3-d619-43cb-b58b-853802a09f83</roleId>
             <roleName>ROLE_TENANT_READER</roleName>
         </role>
         <role>
-            <roleId>bbbf085e-3680-4836-a525-52d6d687c1e6</roleId>
+            <roleId>16a94748-d98b-4a6d-b404-795915856dca</roleId>
             <roleName>ROLE_TENANT_READER</roleName>
         </role>
     </permissionRole>
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>eb7565ed-c182-4e90-91e3-50739a46dc64</permissionId>
+            <permissionId>6389a857-acb1-4eba-b4d6-25defe3c8ea9</permissionId>
             <resourceName>accounts/accountroles</resourceName>
         </permission>
         <role>
-            <roleId>f7cf0799-0f99-475b-a429-c7cca1349341</roleId>
+            <roleId>58b72cb3-d619-43cb-b58b-853802a09f83</roleId>
             <roleName>ROLE_TENANT_READER</roleName>
         </role>
         <role>
-            <roleId>bbbf085e-3680-4836-a525-52d6d687c1e6</roleId>
+            <roleId>16a94748-d98b-4a6d-b404-795915856dca</roleId>
             <roleName>ROLE_TENANT_READER</roleName>
         </role>
     </permissionRole>
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>a2e9f79b-b52d-4091-b37d-82985c28b625</permissionId>
+            <permissionId>f87ae03c-4720-4788-8e50-185b30ee1086</permissionId>
             <resourceName>
                 /accounts/*/accountroles/
             </resourceName>
         </permission>
         <role>
-            <roleId>f7cf0799-0f99-475b-a429-c7cca1349341</roleId>
+            <roleId>58b72cb3-d619-43cb-b58b-853802a09f83</roleId>
             <roleName>ROLE_TENANT_READER</roleName>
         </role>
         <role>
-            <roleId>bbbf085e-3680-4836-a525-52d6d687c1e6</roleId>
+            <roleId>16a94748-d98b-4a6d-b404-795915856dca</roleId>
             <roleName>ROLE_TENANT_READER</roleName>
         </role>
     </permissionRole>
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>c5f024eb-f512-42e8-894b-4acd26983b45</permissionId>
+            <permissionId>46901444-14d5-4f7a-ad3a-9dc2262aef74</permissionId>
             <resourceName>authorization/roles/permroles</resourceName>
         </permission>
         <role>
-            <roleId>f7cf0799-0f99-475b-a429-c7cca1349341</roleId>
+            <roleId>58b72cb3-d619-43cb-b58b-853802a09f83</roleId>
             <roleName>ROLE_TENANT_READER</roleName>
         </role>
         <role>
-            <roleId>bbbf085e-3680-4836-a525-52d6d687c1e6</roleId>
+            <roleId>16a94748-d98b-4a6d-b404-795915856dca</roleId>
             <roleName>ROLE_TENANT_READER</roleName>
         </role>
     </permissionRole>
     <permissionRole>
         <subject>ROLE</subject>
         <permission>
-            <permissionId>d22a2918-4b1b-44e9-a29b-7524281f93ab</permissionId>
+            <permissionId>1fe6ccf4-4276-4d3b-bad4-3fe1bb6c7d0f</permissionId>
             <resourceName>
                 /authorization/roles/*/permroles/
             </resourceName>
         </permission>
         <role>
-            <roleId>f7cf0799-0f99-475b-a429-c7cca1349341</roleId>
+            <roleId>58b72cb3-d619-43cb-b58b-853802a09f83</roleId>
             <roleName>ROLE_TENANT_READER</roleName>
         </role>
         <role>
-            <roleId>bbbf085e-3680-4836-a525-52d6d687c1e6</roleId>
+            <roleId>16a94748-d98b-4a6d-b404-795915856dca</roleId>
             <roleName>ROLE_TENANT_READER</roleName>
         </role>
     </permissionRole>

diff --git a/services/authorization-mgt/import/src/main/resources/import-data/import-permissions.xml b/services/authorization-mgt/import/src/main/resources/import-data/import-permissions.xml
index 304f6882a5429a298b05a3e9678504ef83eca01d..e5c1917ed6efcbbd55c9dc613240a867261c7b2f 100644 (file)
--- a/services/authorization-mgt/import/src/main/resources/import-data/import-permissions.xml
+++ b/services/authorization-mgt/import/src/main/resources/import-data/import-permissions.xml
@@ -1,6 +1,6 @@
 <?xml version="1.0" encoding="UTF-8" standalone="yes"?>
 <ns2:permissions_list xmlns:ns2="http://collectionspace.org/services/authorization">
-    <permission csid="d33b48cf-e819-4e60-ab2e-ba3f3d051f07">
+    <permission csid="7a3779f9-6fd0-4c90-865e-9855fc503340">
         <description>generated admin permission</description>
         <resourceName>idgenerators</resourceName>
         <action>
@@ -20,9 +20,9 @@
         </action>
         <effect>PERMIT</effect>
         <tenant_id>2</tenant_id>
-        <createdAt>2010-06-09T12:04:57.226</createdAt>
+        <createdAt>2010-06-14T11:14:34.845</createdAt>
     </permission>
-    <permission csid="4b433f0a-32cb-4baf-9fcf-dc85e73eb282">
+    <permission csid="2a32873d-7e34-44a3-874c-6ae59b97210b">
         <description>generated admin permission</description>
         <resourceName>id</resourceName>
         <action>
@@ -42,9 +42,9 @@
         </action>
         <effect>PERMIT</effect>
         <tenant_id>2</tenant_id>
-        <createdAt>2010-06-09T12:04:57.228</createdAt>
+        <createdAt>2010-06-14T11:14:34.846</createdAt>
     </permission>
-    <permission csid="e6b24556-774d-4ab5-936d-f20c81686055">
+    <permission csid="8c7caa28-4ccc-44aa-b925-49406f1ab8db">
         <description>generated admin permission</description>
         <resourceName>
                 /idgenerators/*/ids
@@ -66,9 +66,9 @@
         </action>
         <effect>PERMIT</effect>
         <tenant_id>2</tenant_id>
-        <createdAt>2010-06-09T12:04:57.228</createdAt>
+        <createdAt>2010-06-14T11:14:34.847</createdAt>
     </permission>
-    <permission csid="c1d5f82c-fbc2-452e-a816-a8a4af1ff187">
+    <permission csid="45e6183c-dbd4-4922-a434-607fb5033e5a">
         <description>generated admin permission</description>
         <resourceName>collectionobjects</resourceName>
         <action>
@@ -88,9 +88,9 @@
         </action>
         <effect>PERMIT</effect>
         <tenant_id>2</tenant_id>
-        <createdAt>2010-06-09T12:04:57.229</createdAt>
+        <createdAt>2010-06-14T11:14:34.847</createdAt>
     </permission>
-    <permission csid="de3b57c2-7a69-4f3e-aeb5-c99b6ab96215">
+    <permission csid="22d1bf2c-28b8-4cad-81b2-d579d205ae83">
         <description>generated admin permission</description>
         <resourceName>
                 /collectionobjects/*/authorityrefs/
@@ -112,9 +112,9 @@
         </action>
         <effect>PERMIT</effect>
         <tenant_id>2</tenant_id>
-        <createdAt>2010-06-09T12:04:57.229</createdAt>
+        <createdAt>2010-06-14T11:14:34.847</createdAt>
     </permission>
-    <permission csid="29b4c628-f114-40fe-863e-763e6beb00db">
+    <permission csid="993254e1-52cc-45b2-839a-3280c41ebb75">
         <description>generated admin permission</description>
         <resourceName>intakes</resourceName>
         <action>
@@ -134,9 +134,9 @@
         </action>
         <effect>PERMIT</effect>
         <tenant_id>2</tenant_id>
-        <createdAt>2010-06-09T12:04:57.229</createdAt>
+        <createdAt>2010-06-14T11:14:34.848</createdAt>
     </permission>
-    <permission csid="bd86eeeb-9ed8-48f6-a5c9-ab82d4689548">
+    <permission csid="c246574f-7e7d-4a3d-90a3-488a1f13440c">
         <description>generated admin permission</description>
         <resourceName>
                 /intakes/*/authorityrefs/
@@ -158,9 +158,9 @@
         </action>
         <effect>PERMIT</effect>
         <tenant_id>2</tenant_id>
-        <createdAt>2010-06-09T12:04:57.230</createdAt>
+        <createdAt>2010-06-14T11:14:34.848</createdAt>
     </permission>
-    <permission csid="a11a3a8e-311e-43e0-b91f-1bb315614469">
+    <permission csid="12793f24-a04e-4b73-98f1-975d0877b481">
         <description>generated admin permission</description>
         <resourceName>loansin</resourceName>
         <action>
@@ -180,9 +180,9 @@
         </action>
         <effect>PERMIT</effect>
         <tenant_id>2</tenant_id>
-        <createdAt>2010-06-09T12:04:57.230</createdAt>
+        <createdAt>2010-06-14T11:14:34.848</createdAt>
     </permission>
-    <permission csid="9b89bd44-4611-400e-b6e4-b66437d1fd4c">
+    <permission csid="ec067cf5-ef69-4118-9557-1080659ebab8">
         <description>generated admin permission</description>
         <resourceName>
                 /loansin/*/authorityrefs/
@@ -204,9 +204,9 @@
         </action>
         <effect>PERMIT</effect>
         <tenant_id>2</tenant_id>
-        <createdAt>2010-06-09T12:04:57.232</createdAt>
+        <createdAt>2010-06-14T11:14:34.849</createdAt>
     </permission>
-    <permission csid="9b182e51-fd72-4daf-af69-c8047be84b8b">
+    <permission csid="0b84bbc3-8ca2-4566-8f16-2a827e68934c">
         <description>generated admin permission</description>
         <resourceName>loansout</resourceName>
         <action>
@@ -226,9 +226,9 @@
         </action>
         <effect>PERMIT</effect>
         <tenant_id>2</tenant_id>
-        <createdAt>2010-06-09T12:04:57.233</createdAt>
+        <createdAt>2010-06-14T11:14:34.849</createdAt>
     </permission>
-    <permission csid="ac8a3d77-709b-4120-8e2c-26d375ccb673">
+    <permission csid="be0632f2-4185-4447-b525-fdbfcf8a74cf">
         <description>generated admin permission</description>
         <resourceName>
                 /loansout/*/authorityrefs/
@@ -250,9 +250,9 @@
         </action>
         <effect>PERMIT</effect>
         <tenant_id>2</tenant_id>
-        <createdAt>2010-06-09T12:04:57.233</createdAt>
+        <createdAt>2010-06-14T11:14:34.850</createdAt>
     </permission>
-    <permission csid="f6797f43-74c1-4dd5-957b-96b264509e0a">
+    <permission csid="4489fe0b-3859-40b2-a1c2-77d6527aed53">
         <description>generated admin permission</description>
         <resourceName>movements</resourceName>
         <action>
@@ -272,9 +272,9 @@
         </action>
         <effect>PERMIT</effect>
         <tenant_id>2</tenant_id>
-        <createdAt>2010-06-09T12:04:57.234</createdAt>
+        <createdAt>2010-06-14T11:14:34.850</createdAt>
     </permission>
-    <permission csid="f016c28a-afc1-4fda-bd18-8ca532f94b9c">
+    <permission csid="23eb0343-3a0c-4047-988e-74e626a8b11a">
         <description>generated admin permission</description>
         <resourceName>
                 /movements/*/authorityrefs/
@@ -296,9 +296,9 @@
         </action>
         <effect>PERMIT</effect>
         <tenant_id>2</tenant_id>
-        <createdAt>2010-06-09T12:04:57.234</createdAt>
+        <createdAt>2010-06-14T11:14:34.851</createdAt>
     </permission>
-    <permission csid="d21d72d8-a9f9-40dd-a14d-7463bef3e457">
+    <permission csid="b4355e36-3fec-4759-b88e-96595a1182e2">
         <description>generated admin permission</description>
         <resourceName>vocabularies</resourceName>
         <action>
@@ -318,9 +318,9 @@
         </action>
         <effect>PERMIT</effect>
         <tenant_id>2</tenant_id>
-        <createdAt>2010-06-09T12:04:57.234</createdAt>
+        <createdAt>2010-06-14T11:14:34.851</createdAt>
     </permission>
-    <permission csid="db3a13e8-d795-463d-a2f7-0bc1fb7e6782">
+    <permission csid="a30f6399-95a6-4c68-8ecd-6a46d2b3c397">
         <description>generated admin permission</description>
         <resourceName>vocabularyitems</resourceName>
         <action>
@@ -340,9 +340,9 @@
         </action>
         <effect>PERMIT</effect>
         <tenant_id>2</tenant_id>
-        <createdAt>2010-06-09T12:04:57.235</createdAt>
+        <createdAt>2010-06-14T11:14:34.851</createdAt>
     </permission>
-    <permission csid="1f3ade41-7799-44db-86e5-0a8cb1122a69">
+    <permission csid="30425726-f621-47d4-a7aa-6f2f51c15ec0">
         <description>generated admin permission</description>
         <resourceName>
                 /vocabularies/*/items/
@@ -364,9 +364,9 @@
         </action>
         <effect>PERMIT</effect>
         <tenant_id>2</tenant_id>
-        <createdAt>2010-06-09T12:04:57.235</createdAt>
+        <createdAt>2010-06-14T11:14:34.852</createdAt>
     </permission>
-    <permission csid="302bccc4-dcf0-4790-b1ea-928eb8eeb422">
+    <permission csid="71946447-2f14-423d-8d97-c5b5a504a43d">
         <description>generated admin permission</description>
         <resourceName>orgauthorities</resourceName>
         <action>
@@ -386,9 +386,9 @@
         </action>
         <effect>PERMIT</effect>
         <tenant_id>2</tenant_id>
-        <createdAt>2010-06-09T12:04:57.235</createdAt>
+        <createdAt>2010-06-14T11:14:34.852</createdAt>
     </permission>
-    <permission csid="78af26c0-d2d0-48d7-aad2-2b39a07de22e">
+    <permission csid="8a576a05-4df4-40ce-8e6e-e361d115346b">
         <description>generated admin permission</description>
         <resourceName>
                 /orgauthorities/*/items/*/authorityrefs/
@@ -410,9 +410,9 @@
         </action>
         <effect>PERMIT</effect>
         <tenant_id>2</tenant_id>
-        <createdAt>2010-06-09T12:04:57.235</createdAt>
+        <createdAt>2010-06-14T11:14:34.853</createdAt>
     </permission>
-    <permission csid="16b37ab0-06f4-4c61-822d-58dc11175a29">
+    <permission csid="3f19ad0d-7a32-4179-9eb4-a92e9b9950ab">
         <description>generated admin permission</description>
         <resourceName>organizations</resourceName>
         <action>
@@ -432,9 +432,9 @@
         </action>
         <effect>PERMIT</effect>
         <tenant_id>2</tenant_id>
-        <createdAt>2010-06-09T12:04:57.236</createdAt>
+        <createdAt>2010-06-14T11:14:34.853</createdAt>
     </permission>
-    <permission csid="ecda26f6-0561-48cd-976b-c429248162c2">
+    <permission csid="2a82f7d6-4051-4d4f-a460-5f50f94088d6">
         <description>generated admin permission</description>
         <resourceName>
                 /orgauthorities/*/items/
@@ -456,9 +456,9 @@
         </action>
         <effect>PERMIT</effect>
         <tenant_id>2</tenant_id>
-        <createdAt>2010-06-09T12:04:57.236</createdAt>
+        <createdAt>2010-06-14T11:14:34.853</createdAt>
     </permission>
-    <permission csid="7134a8c0-4e8a-49f0-9fcd-25f0f4d2aadd">
+    <permission csid="5963d650-0c56-48ef-b2c0-6aaafad4d29c">
         <description>generated admin permission</description>
         <resourceName>
                 /orgauthorities/*/items/*/refobjs
@@ -480,9 +480,9 @@
         </action>
         <effect>PERMIT</effect>
         <tenant_id>2</tenant_id>
-        <createdAt>2010-06-09T12:04:57.236</createdAt>
+        <createdAt>2010-06-14T11:14:34.854</createdAt>
     </permission>
-    <permission csid="59563bb2-747a-4be1-b725-b19164786088">
+    <permission csid="7923a8eb-086f-4884-9677-4b92b1ebeb49">
         <description>generated admin permission</description>
         <resourceName>personauthorities</resourceName>
         <action>
@@ -502,9 +502,9 @@
         </action>
         <effect>PERMIT</effect>
         <tenant_id>2</tenant_id>
-        <createdAt>2010-06-09T12:04:57.236</createdAt>
+        <createdAt>2010-06-14T11:14:34.854</createdAt>
     </permission>
-    <permission csid="859b02e3-2496-4bef-86b9-eded6efc26c3">
+    <permission csid="ad893bde-69bf-433b-b69c-1d2f7310f8d5">
         <description>generated admin permission</description>
         <resourceName>
                 /personauthorities/*/items/
@@ -526,9 +526,9 @@
         </action>
         <effect>PERMIT</effect>
         <tenant_id>2</tenant_id>
-        <createdAt>2010-06-09T12:04:57.237</createdAt>
+        <createdAt>2010-06-14T11:14:34.854</createdAt>
     </permission>
-    <permission csid="c1925e22-a9b1-49ba-a2f3-9bec0f49dc73">
+    <permission csid="4c2fa893-2dbb-47a4-954f-f29d9660360c">
         <description>generated admin permission</description>
         <resourceName>
                 /personauthorities/*/items/*/refobjs
@@ -550,9 +550,9 @@
         </action>
         <effect>PERMIT</effect>
         <tenant_id>2</tenant_id>
-        <createdAt>2010-06-09T12:04:57.237</createdAt>
+        <createdAt>2010-06-14T11:14:34.855</createdAt>
     </permission>
-    <permission csid="14d1ec5d-7aec-4434-a87b-3c241d57c990">
+    <permission csid="4dff584a-44c7-4779-afe0-09c4f1b6419e">
         <description>generated admin permission</description>
         <resourceName>persons</resourceName>
         <action>
@@ -572,9 +572,9 @@
         </action>
         <effect>PERMIT</effect>
         <tenant_id>2</tenant_id>
-        <createdAt>2010-06-09T12:04:57.237</createdAt>
+        <createdAt>2010-06-14T11:14:34.855</createdAt>
     </permission>
-    <permission csid="e996ffda-ab9b-4496-ae5e-fbf4fc0c2095">
+    <permission csid="bdf71a87-fbbd-4679-ba43-753a760547da">
         <description>generated admin permission</description>
         <resourceName>
                 /personauthorities/*/items/
@@ -596,9 +596,9 @@
         </action>
         <effect>PERMIT</effect>
         <tenant_id>2</tenant_id>
-        <createdAt>2010-06-09T12:04:57.238</createdAt>
+        <createdAt>2010-06-14T11:14:34.855</createdAt>
     </permission>
-    <permission csid="98aabdae-d3a5-498e-9b88-2a10e08bbff2">
+    <permission csid="efa8ce59-07ff-4f5b-a840-f06d7c731599">
         <description>generated admin permission</description>
         <resourceName>locationauthorities</resourceName>
         <action>
@@ -618,9 +618,9 @@
         </action>
         <effect>PERMIT</effect>
         <tenant_id>2</tenant_id>
-        <createdAt>2010-06-09T12:04:57.239</createdAt>
+        <createdAt>2010-06-14T11:14:34.856</createdAt>
     </permission>
-    <permission csid="c2cc174c-77ae-4465-8020-4345b95ca22b">
+    <permission csid="be3e4867-73db-4967-a1b0-61bcc268cc74">
         <description>generated admin permission</description>
         <resourceName>
                 /locationauthorities/*/items/
@@ -642,9 +642,9 @@
         </action>
         <effect>PERMIT</effect>
         <tenant_id>2</tenant_id>
-        <createdAt>2010-06-09T12:04:57.239</createdAt>
+        <createdAt>2010-06-14T11:14:34.856</createdAt>
     </permission>
-    <permission csid="bc95ef29-37ea-445e-8333-d23e425dabc0">
+    <permission csid="f7b0955f-ff85-4153-98ef-bcb2d6557895">
         <description>generated admin permission</description>
         <resourceName>locations</resourceName>
         <action>
@@ -664,9 +664,9 @@
         </action>
         <effect>PERMIT</effect>
         <tenant_id>2</tenant_id>
-        <createdAt>2010-06-09T12:04:57.239</createdAt>
+        <createdAt>2010-06-14T11:14:34.856</createdAt>
     </permission>
-    <permission csid="5aa40337-279e-4174-9b6b-04fc902f3759">
+    <permission csid="680db6da-ece6-41b7-949e-242e8753b44a">
         <description>generated admin permission</description>
         <resourceName>acquisitions</resourceName>
         <action>
@@ -686,9 +686,9 @@
         </action>
         <effect>PERMIT</effect>
         <tenant_id>2</tenant_id>
-        <createdAt>2010-06-09T12:04:57.239</createdAt>
+        <createdAt>2010-06-14T11:14:34.857</createdAt>
     </permission>
-    <permission csid="9157f4b1-acad-455d-a9eb-60bb8cb63bc2">
+    <permission csid="8b322e33-b1f8-4162-abc2-48c6648296e8">
         <description>generated admin permission</description>
         <resourceName>
                 /acquisitions/*/authorityrefs/
@@ -710,9 +710,9 @@
         </action>
         <effect>PERMIT</effect>
         <tenant_id>2</tenant_id>
-        <createdAt>2010-06-09T12:04:57.240</createdAt>
+        <createdAt>2010-06-14T11:14:34.857</createdAt>
     </permission>
-    <permission csid="bbe0d2e4-dde6-484a-a413-c6c20f89ff7e">
+    <permission csid="bcca627d-8ed5-49fe-ac10-86226e8d314c">
         <description>generated admin permission</description>
         <resourceName>relations</resourceName>
         <action>
@@ -732,12 +732,12 @@
         </action>
         <effect>PERMIT</effect>
         <tenant_id>2</tenant_id>
-        <createdAt>2010-06-09T12:04:57.240</createdAt>
+        <createdAt>2010-06-14T11:14:34.857</createdAt>
     </permission>
-    <permission csid="3e8bdbf8-2179-460a-93b9-9fc568b811b9">
+    <permission csid="c016b267-869a-4249-b875-6266cc6beed0">
         <description>generated admin permission</description>
         <resourceName>
-                relations/subject/*/type/*/object/*
+                /relations/object/*
             </resourceName>
         <action>
             <name>CREATE</name>
@@ -756,9 +756,201 @@
         </action>
         <effect>PERMIT</effect>
         <tenant_id>2</tenant_id>
-        <createdAt>2010-06-09T12:04:57.240</createdAt>
+        <createdAt>2010-06-14T11:14:34.858</createdAt>
     </permission>
-    <permission csid="a3846604-8781-4ce8-a8ee-8dd5b6a8875f">
+    <permission csid="b06dcf8a-3c73-4ec6-aac0-630b66452ddd">
+        <description>generated admin permission</description>
+        <resourceName>
+                /relations/object/*/type/*
+            </resourceName>
+        <action>
+            <name>CREATE</name>
+        </action>
+        <action>
+            <name>READ</name>
+        </action>
+        <action>
+            <name>UPDATE</name>
+        </action>
+        <action>
+            <name>DELETE</name>
+        </action>
+        <action>
+            <name>SEARCH</name>
+        </action>
+        <effect>PERMIT</effect>
+        <tenant_id>2</tenant_id>
+        <createdAt>2010-06-14T11:14:34.858</createdAt>
+    </permission>
+    <permission csid="c6485a0d-a9c8-4bb2-a508-45e2f08e019c">
+        <description>generated admin permission</description>
+        <resourceName>
+                /relations/subject/*
+            </resourceName>
+        <action>
+            <name>CREATE</name>
+        </action>
+        <action>
+            <name>READ</name>
+        </action>
+        <action>
+            <name>UPDATE</name>
+        </action>
+        <action>
+            <name>DELETE</name>
+        </action>
+        <action>
+            <name>SEARCH</name>
+        </action>
+        <effect>PERMIT</effect>
+        <tenant_id>2</tenant_id>
+        <createdAt>2010-06-14T11:14:34.858</createdAt>
+    </permission>
+    <permission csid="d4da49a7-fdaf-4dcb-a609-be1365adf3eb">
+        <description>generated admin permission</description>
+        <resourceName>
+                /relations/subject/*/type/*
+            </resourceName>
+        <action>
+            <name>CREATE</name>
+        </action>
+        <action>
+            <name>READ</name>
+        </action>
+        <action>
+            <name>UPDATE</name>
+        </action>
+        <action>
+            <name>DELETE</name>
+        </action>
+        <action>
+            <name>SEARCH</name>
+        </action>
+        <effect>PERMIT</effect>
+        <tenant_id>2</tenant_id>
+        <createdAt>2010-06-14T11:14:34.859</createdAt>
+    </permission>
+    <permission csid="dab555c4-f87e-4a55-b6ef-303a1e4e3d52">
+        <description>generated admin permission</description>
+        <resourceName>
+                /relations/subject/*/type/*/object/*
+            </resourceName>
+        <action>
+            <name>CREATE</name>
+        </action>
+        <action>
+            <name>READ</name>
+        </action>
+        <action>
+            <name>UPDATE</name>
+        </action>
+        <action>
+            <name>DELETE</name>
+        </action>
+        <action>
+            <name>SEARCH</name>
+        </action>
+        <effect>PERMIT</effect>
+        <tenant_id>2</tenant_id>
+        <createdAt>2010-06-14T11:14:34.859</createdAt>
+    </permission>
+    <permission csid="6b901d1f-d48e-4abd-aa34-ad86071e16b5">
+        <description>generated admin permission</description>
+        <resourceName>
+                /relations/type/*
+            </resourceName>
+        <action>
+            <name>CREATE</name>
+        </action>
+        <action>
+            <name>READ</name>
+        </action>
+        <action>
+            <name>UPDATE</name>
+        </action>
+        <action>
+            <name>DELETE</name>
+        </action>
+        <action>
+            <name>SEARCH</name>
+        </action>
+        <effect>PERMIT</effect>
+        <tenant_id>2</tenant_id>
+        <createdAt>2010-06-14T11:14:34.859</createdAt>
+    </permission>
+    <permission csid="14598bc1-98a3-4be1-ac1d-2b0627de1d73">
+        <description>generated admin permission</description>
+        <resourceName>
+                /relations/type/*/object/*
+            </resourceName>
+        <action>
+            <name>CREATE</name>
+        </action>
+        <action>
+            <name>READ</name>
+        </action>
+        <action>
+            <name>UPDATE</name>
+        </action>
+        <action>
+            <name>DELETE</name>
+        </action>
+        <action>
+            <name>SEARCH</name>
+        </action>
+        <effect>PERMIT</effect>
+        <tenant_id>2</tenant_id>
+        <createdAt>2010-06-14T11:14:34.860</createdAt>
+    </permission>
+    <permission csid="794d6241-dfe3-4878-9ee8-c01e762e0b97">
+        <description>generated admin permission</description>
+        <resourceName>
+                /relations/type/*/subject/*
+            </resourceName>
+        <action>
+            <name>CREATE</name>
+        </action>
+        <action>
+            <name>READ</name>
+        </action>
+        <action>
+            <name>UPDATE</name>
+        </action>
+        <action>
+            <name>DELETE</name>
+        </action>
+        <action>
+            <name>SEARCH</name>
+        </action>
+        <effect>PERMIT</effect>
+        <tenant_id>2</tenant_id>
+        <createdAt>2010-06-14T11:14:34.860</createdAt>
+    </permission>
+    <permission csid="d5d555d7-2bef-4440-a568-70906599c3e5">
+        <description>generated admin permission</description>
+        <resourceName>
+                /relations/type/*/subject/*/object/*
+            </resourceName>
+        <action>
+            <name>CREATE</name>
+        </action>
+        <action>
+            <name>READ</name>
+        </action>
+        <action>
+            <name>UPDATE</name>
+        </action>
+        <action>
+            <name>DELETE</name>
+        </action>
+        <action>
+            <name>SEARCH</name>
+        </action>
+        <effect>PERMIT</effect>
+        <tenant_id>2</tenant_id>
+        <createdAt>2010-06-14T11:14:34.860</createdAt>
+    </permission>
+    <permission csid="738be548-ab9f-47f3-b833-cc88a7fadadc">
         <description>generated admin permission</description>
         <resourceName>accounts</resourceName>
         <action>
@@ -778,9 +970,9 @@
         </action>
         <effect>PERMIT</effect>
         <tenant_id>2</tenant_id>
-        <createdAt>2010-06-09T12:04:57.240</createdAt>
+        <createdAt>2010-06-14T11:14:34.861</createdAt>
     </permission>
-    <permission csid="c14386ba-d17c-4dd3-a154-8ce06efeb88b">
+    <permission csid="d0dde634-6382-494a-ab58-e48a2400c3c4">
         <description>generated admin permission</description>
         <resourceName>dimensions</resourceName>
         <action>
@@ -800,9 +992,9 @@
         </action>
         <effect>PERMIT</effect>
         <tenant_id>2</tenant_id>
-        <createdAt>2010-06-09T12:04:57.241</createdAt>
+        <createdAt>2010-06-14T11:14:34.861</createdAt>
     </permission>
-    <permission csid="6c76319d-ae10-438c-81a8-2d414467f4f2">
+    <permission csid="d0ffd0b6-4bb6-4862-8186-ea3346d83e4d">
         <description>generated admin permission</description>
         <resourceName>contacts</resourceName>
         <action>
@@ -822,9 +1014,9 @@
         </action>
         <effect>PERMIT</effect>
         <tenant_id>2</tenant_id>
-        <createdAt>2010-06-09T12:04:57.241</createdAt>
+        <createdAt>2010-06-14T11:14:34.861</createdAt>
     </permission>
-    <permission csid="ba018b2f-b239-4710-8279-f306a9a4e387">
+    <permission csid="e97f32c5-1327-481b-b45a-205ec7a848c0">
         <description>generated admin permission</description>
         <resourceName>
                 /personauthorities/*/items/*/contacts
@@ -846,9 +1038,9 @@
         </action>
         <effect>PERMIT</effect>
         <tenant_id>2</tenant_id>
-        <createdAt>2010-06-09T12:04:57.242</createdAt>
+        <createdAt>2010-06-14T11:14:34.862</createdAt>
     </permission>
-    <permission csid="53165bff-c95e-4a97-a39a-1ad340e168d2">
+    <permission csid="0697c73b-44ca-4849-bbec-18718c1c52aa">
         <description>generated admin permission</description>
         <resourceName>
                 /orgauthorities/*/items/*/contacts
@@ -870,9 +1062,9 @@
         </action>
         <effect>PERMIT</effect>
         <tenant_id>2</tenant_id>
-        <createdAt>2010-06-09T12:04:57.242</createdAt>
+        <createdAt>2010-06-14T11:14:34.862</createdAt>
     </permission>
-    <permission csid="28e80b62-7df5-4711-8040-da8a97b76821">
+    <permission csid="855eee73-dcfb-42ea-8a80-a8d5fd2b0fbf">
         <description>generated admin permission</description>
         <resourceName>notes</resourceName>
         <action>
@@ -892,9 +1084,9 @@
         </action>
         <effect>PERMIT</effect>
         <tenant_id>2</tenant_id>
-        <createdAt>2010-06-09T12:04:57.242</createdAt>
+        <createdAt>2010-06-14T11:14:34.862</createdAt>
     </permission>
-    <permission csid="4d216907-5bb9-41d3-9a56-9d3313e12b23">
+    <permission csid="9bc08b08-0f23-4efd-b44a-d88e85c8cce6">
         <description>generated admin permission</description>
         <resourceName>authorization/roles</resourceName>
         <action>
@@ -914,9 +1106,9 @@
         </action>
         <effect>PERMIT</effect>
         <tenant_id>2</tenant_id>
-        <createdAt>2010-06-09T12:04:57.243</createdAt>
+        <createdAt>2010-06-14T11:14:34.863</createdAt>
     </permission>
-    <permission csid="fb0bbb98-d3f8-4153-8465-77e4e17414c7">
+    <permission csid="07bcadf0-285a-4522-8263-e0a3bd77dff2">
         <description>generated admin permission</description>
         <resourceName>authorization/permissions</resourceName>
         <action>
@@ -936,9 +1128,9 @@
         </action>
         <effect>PERMIT</effect>
         <tenant_id>2</tenant_id>
-        <createdAt>2010-06-09T12:04:57.243</createdAt>
+        <createdAt>2010-06-14T11:14:34.863</createdAt>
     </permission>
-    <permission csid="edcfafc7-908a-47de-93a5-907b83dbbdd2">
+    <permission csid="86941ad6-f97f-4e9c-9f10-fd64ceba33a4">
         <description>generated admin permission</description>
         <resourceName>authorization/permissions/permroles</resourceName>
         <action>
@@ -958,9 +1150,9 @@
         </action>
         <effect>PERMIT</effect>
         <tenant_id>2</tenant_id>
-        <createdAt>2010-06-09T12:04:57.243</createdAt>
+        <createdAt>2010-06-14T11:14:34.863</createdAt>
     </permission>
-    <permission csid="4b6ac5dd-46e1-4ae6-b9b5-0bcd6abbcb96">
+    <permission csid="70f483c1-0d61-4da6-99ac-1306db3ba198">
         <description>generated admin permission</description>
         <resourceName>
                 /authorization/permissions/*/permroles/
@@ -982,9 +1174,9 @@
         </action>
         <effect>PERMIT</effect>
         <tenant_id>2</tenant_id>
-        <createdAt>2010-06-09T12:04:57.243</createdAt>
+        <createdAt>2010-06-14T11:14:34.863</createdAt>
     </permission>
-    <permission csid="a9de2ce1-dfba-43d9-8c4d-9edf55f16935">
+    <permission csid="37d853f2-41c6-44b3-b3bc-519c20627a3f">
         <description>generated admin permission</description>
         <resourceName>accounts/accountroles</resourceName>
         <action>
@@ -1004,9 +1196,9 @@
         </action>
         <effect>PERMIT</effect>
         <tenant_id>2</tenant_id>
-        <createdAt>2010-06-09T12:04:57.244</createdAt>
+        <createdAt>2010-06-14T11:14:34.864</createdAt>
     </permission>
-    <permission csid="bab39bc6-4a06-4e20-b49d-cb20599cc8e0">
+    <permission csid="9b1f24dc-60b1-4d30-8a78-58a216ebbac3">
         <description>generated admin permission</description>
         <resourceName>
                 /accounts/*/accountroles/
@@ -1028,9 +1220,9 @@
         </action>
         <effect>PERMIT</effect>
         <tenant_id>2</tenant_id>
-        <createdAt>2010-06-09T12:04:57.244</createdAt>
+        <createdAt>2010-06-14T11:14:34.864</createdAt>
     </permission>
-    <permission csid="bb6074b5-7c0f-410a-a077-07e5102bd86f">
+    <permission csid="084caa48-ffc6-45d7-aab3-ddeafacf322d">
         <description>generated admin permission</description>
         <resourceName>authorization/roles/permroles</resourceName>
         <action>
@@ -1050,9 +1242,9 @@
         </action>
         <effect>PERMIT</effect>
         <tenant_id>2</tenant_id>
-        <createdAt>2010-06-09T12:04:57.244</createdAt>
+        <createdAt>2010-06-14T11:14:34.864</createdAt>
     </permission>
-    <permission csid="fd71fc5b-76ae-4d2c-a011-d6ebd350799c">
+    <permission csid="997129b8-e0dd-4319-8192-fe1dd81011c3">
         <description>generated admin permission</description>
         <resourceName>
                 /authorization/roles/*/permroles/
@@ -1074,9 +1266,9 @@
         </action>
         <effect>PERMIT</effect>
         <tenant_id>2</tenant_id>
-        <createdAt>2010-06-09T12:04:57.244</createdAt>
+        <createdAt>2010-06-14T11:14:34.864</createdAt>
     </permission>
-    <permission csid="d785edac-30d7-4b1f-b120-d25c5cfa7459">
+    <permission csid="64b5cfcc-fcae-4739-a0c4-59285d78bc76">
         <description>generated admin permission</description>
         <resourceName>idgenerators</resourceName>
         <action>
@@ -1096,9 +1288,9 @@
         </action>
         <effect>PERMIT</effect>
         <tenant_id>1</tenant_id>
-        <createdAt>2010-06-09T12:04:57.275</createdAt>
+        <createdAt>2010-06-14T11:14:34.877</createdAt>
     </permission>
-    <permission csid="0b4da442-b30c-4445-9bb4-0838d6153db5">
+    <permission csid="9d18e1bf-0aaa-4207-9128-809167ba84ad">
         <description>generated admin permission</description>
         <resourceName>id</resourceName>
         <action>
@@ -1118,9 +1310,9 @@
         </action>
         <effect>PERMIT</effect>
         <tenant_id>1</tenant_id>
-        <createdAt>2010-06-09T12:04:57.275</createdAt>
+        <createdAt>2010-06-14T11:14:34.877</createdAt>
     </permission>
-    <permission csid="7ea90ded-ebca-4046-98fb-fdef5041f385">
+    <permission csid="7b60568b-0466-44fc-bfd6-8d68efee44a0">
         <description>generated admin permission</description>
         <resourceName>
                 /idgenerators/*/ids
@@ -1142,9 +1334,9 @@
         </action>
         <effect>PERMIT</effect>
         <tenant_id>1</tenant_id>
-        <createdAt>2010-06-09T12:04:57.276</createdAt>
+        <createdAt>2010-06-14T11:14:34.878</createdAt>
     </permission>
-    <permission csid="a2e2bacb-4d4e-4f82-91c7-e57447bd9799">
+    <permission csid="5055f9c0-0277-47e6-9874-8fa3565a95c4">
         <description>generated admin permission</description>
         <resourceName>collectionobjects</resourceName>
         <action>
@@ -1164,9 +1356,9 @@
         </action>
         <effect>PERMIT</effect>
         <tenant_id>1</tenant_id>
-        <createdAt>2010-06-09T12:04:57.276</createdAt>
+        <createdAt>2010-06-14T11:14:34.878</createdAt>
     </permission>
-    <permission csid="1c37144c-94c2-427f-bc42-e85e402ed548">
+    <permission csid="b1e05df7-328d-4afe-92ff-d44a4bf50ab7">
         <description>generated admin permission</description>
         <resourceName>
                 /collectionobjects/*/authorityrefs/
@@ -1188,9 +1380,9 @@
         </action>
         <effect>PERMIT</effect>
         <tenant_id>1</tenant_id>
-        <createdAt>2010-06-09T12:04:57.279</createdAt>
+        <createdAt>2010-06-14T11:14:34.878</createdAt>
     </permission>
-    <permission csid="e337aac3-f491-4e12-bf8a-191e710bcf39">
+    <permission csid="cf220409-e37f-4972-adff-79ee4fca7791">
         <description>generated admin permission</description>
         <resourceName>intakes</resourceName>
         <action>
@@ -1210,9 +1402,9 @@
         </action>
         <effect>PERMIT</effect>
         <tenant_id>1</tenant_id>
-        <createdAt>2010-06-09T12:04:57.280</createdAt>
+        <createdAt>2010-06-14T11:14:34.878</createdAt>
     </permission>
-    <permission csid="9b82bb67-5ad4-4ecd-a127-290dfda83e7e">
+    <permission csid="1cd45b9b-5114-47f5-8507-913c5643d9db">
         <description>generated admin permission</description>
         <resourceName>
                 /intakes/*/authorityrefs/
@@ -1234,9 +1426,9 @@
         </action>
         <effect>PERMIT</effect>
         <tenant_id>1</tenant_id>
-        <createdAt>2010-06-09T12:04:57.280</createdAt>
+        <createdAt>2010-06-14T11:14:34.878</createdAt>
     </permission>
-    <permission csid="d6fe2371-3327-4703-a1ea-d7cbed4494a8">
+    <permission csid="e45486cf-f662-4df3-9861-0f9e4f6b0e93">
         <description>generated admin permission</description>
         <resourceName>loansin</resourceName>
         <action>
@@ -1256,13 +1448,195 @@
         </action>
         <effect>PERMIT</effect>
         <tenant_id>1</tenant_id>
-        <createdAt>2010-06-09T12:04:57.280</createdAt>
+        <createdAt>2010-06-14T11:14:34.879</createdAt>
+    </permission>
+    <permission csid="c229d5c6-0511-4cca-966d-eee83aa7bbbd">
+        <description>generated admin permission</description>
+        <resourceName>
+                /loansin/*/authorityrefs/
+            </resourceName>
+        <action>
+            <name>CREATE</name>
+        </action>
+        <action>
+            <name>READ</name>
+        </action>
+        <action>
+            <name>UPDATE</name>
+        </action>
+        <action>
+            <name>DELETE</name>
+        </action>
+        <action>
+            <name>SEARCH</name>
+        </action>
+        <effect>PERMIT</effect>
+        <tenant_id>1</tenant_id>
+        <createdAt>2010-06-14T11:14:34.879</createdAt>
+    </permission>
+    <permission csid="7c43786e-6435-4d44-a9e9-22fa35ef0b65">
+        <description>generated admin permission</description>
+        <resourceName>loansout</resourceName>
+        <action>
+            <name>CREATE</name>
+        </action>
+        <action>
+            <name>READ</name>
+        </action>
+        <action>
+            <name>UPDATE</name>
+        </action>
+        <action>
+            <name>DELETE</name>
+        </action>
+        <action>
+            <name>SEARCH</name>
+        </action>
+        <effect>PERMIT</effect>
+        <tenant_id>1</tenant_id>
+        <createdAt>2010-06-14T11:14:34.879</createdAt>
+    </permission>
+    <permission csid="bdf664c8-5bfb-45a0-a012-d6e1d40ce472">
+        <description>generated admin permission</description>
+        <resourceName>
+                /loansout/*/authorityrefs/
+            </resourceName>
+        <action>
+            <name>CREATE</name>
+        </action>
+        <action>
+            <name>READ</name>
+        </action>
+        <action>
+            <name>UPDATE</name>
+        </action>
+        <action>
+            <name>DELETE</name>
+        </action>
+        <action>
+            <name>SEARCH</name>
+        </action>
+        <effect>PERMIT</effect>
+        <tenant_id>1</tenant_id>
+        <createdAt>2010-06-14T11:14:34.879</createdAt>
+    </permission>
+    <permission csid="c9a28631-bf84-4b41-a2f9-4095cd412bae">
+        <description>generated admin permission</description>
+        <resourceName>movements</resourceName>
+        <action>
+            <name>CREATE</name>
+        </action>
+        <action>
+            <name>READ</name>
+        </action>
+        <action>
+            <name>UPDATE</name>
+        </action>
+        <action>
+            <name>DELETE</name>
+        </action>
+        <action>
+            <name>SEARCH</name>
+        </action>
+        <effect>PERMIT</effect>
+        <tenant_id>1</tenant_id>
+        <createdAt>2010-06-14T11:14:34.879</createdAt>
+    </permission>
+    <permission csid="46e6d8a7-91ef-4cd6-901a-daec5fe39f02">
+        <description>generated admin permission</description>
+        <resourceName>
+                /movements/*/authorityrefs/
+            </resourceName>
+        <action>
+            <name>CREATE</name>
+        </action>
+        <action>
+            <name>READ</name>
+        </action>
+        <action>
+            <name>UPDATE</name>
+        </action>
+        <action>
+            <name>DELETE</name>
+        </action>
+        <action>
+            <name>SEARCH</name>
+        </action>
+        <effect>PERMIT</effect>
+        <tenant_id>1</tenant_id>
+        <createdAt>2010-06-14T11:14:34.880</createdAt>
+    </permission>
+    <permission csid="a18a82b9-f505-418a-afb6-388c4370d129">
+        <description>generated admin permission</description>
+        <resourceName>vocabularies</resourceName>
+        <action>
+            <name>CREATE</name>
+        </action>
+        <action>
+            <name>READ</name>
+        </action>
+        <action>
+            <name>UPDATE</name>
+        </action>
+        <action>
+            <name>DELETE</name>
+        </action>
+        <action>
+            <name>SEARCH</name>
+        </action>
+        <effect>PERMIT</effect>
+        <tenant_id>1</tenant_id>
+        <createdAt>2010-06-14T11:14:34.880</createdAt>
+    </permission>
+    <permission csid="0354b057-3cd7-4ff5-8fa3-8d746d490a58">
+        <description>generated admin permission</description>
+        <resourceName>vocabularyitems</resourceName>
+        <action>
+            <name>CREATE</name>
+        </action>
+        <action>
+            <name>READ</name>
+        </action>
+        <action>
+            <name>UPDATE</name>
+        </action>
+        <action>
+            <name>DELETE</name>
+        </action>
+        <action>
+            <name>SEARCH</name>
+        </action>
+        <effect>PERMIT</effect>
+        <tenant_id>1</tenant_id>
+        <createdAt>2010-06-14T11:14:34.880</createdAt>
+    </permission>
+    <permission csid="e36dfe3e-e143-47d4-9d13-184acd5d81a5">
+        <description>generated admin permission</description>
+        <resourceName>
+                /vocabularies/*/items/
+            </resourceName>
+        <action>
+            <name>CREATE</name>
+        </action>
+        <action>
+            <name>READ</name>
+        </action>
+        <action>
+            <name>UPDATE</name>
+        </action>
+        <action>
+            <name>DELETE</name>
+        </action>
+        <action>
+            <name>SEARCH</name>
+        </action>
+        <effect>PERMIT</effect>
+        <tenant_id>1</tenant_id>
+        <createdAt>2010-06-14T11:14:34.880</createdAt>
     </permission>
-    <permission csid="048bad2c-bfbb-4a1b-bf83-cfdb37669b97">
+    <permission csid="dd310d56-6e70-43e9-81d8-af61fad5a761">
         <description>generated admin permission</description>
-        <resourceName>
-                /loansin/*/authorityrefs/
-            </resourceName>
+        <resourceName>orgauthorities</resourceName>
         <action>
             <name>CREATE</name>
         </action>
@@ -1280,11 +1654,13 @@
         </action>
         <effect>PERMIT</effect>
         <tenant_id>1</tenant_id>
-        <createdAt>2010-06-09T12:04:57.281</createdAt>
+        <createdAt>2010-06-14T11:14:34.880</createdAt>
     </permission>
-    <permission csid="a5d24649-2028-4b52-8125-9ebf6faf23a6">
+    <permission csid="6b903a0b-658b-41ac-9881-5e280c47740d">
         <description>generated admin permission</description>
-        <resourceName>loansout</resourceName>
+        <resourceName>
+                /orgauthorities/*/items/*/authorityrefs/
+            </resourceName>
         <action>
             <name>CREATE</name>
         </action>
@@ -1302,13 +1678,11 @@
         </action>
         <effect>PERMIT</effect>
         <tenant_id>1</tenant_id>
-        <createdAt>2010-06-09T12:04:57.281</createdAt>
+        <createdAt>2010-06-14T11:14:34.881</createdAt>
     </permission>
-    <permission csid="200637f0-3e8b-491f-ab70-be77de4c930a">
+    <permission csid="43681ada-4538-48a2-8774-f4135b90af93">
         <description>generated admin permission</description>
-        <resourceName>
-                /loansout/*/authorityrefs/
-            </resourceName>
+        <resourceName>organizations</resourceName>
         <action>
             <name>CREATE</name>
         </action>
@@ -1326,11 +1700,13 @@
         </action>
         <effect>PERMIT</effect>
         <tenant_id>1</tenant_id>
-        <createdAt>2010-06-09T12:04:57.281</createdAt>
+        <createdAt>2010-06-14T11:14:34.881</createdAt>
     </permission>
-    <permission csid="d4bb0bb9-bb44-4421-992e-328b272458ed">
+    <permission csid="f1b47a46-4e44-44ca-9414-310fade8252e">
         <description>generated admin permission</description>
-        <resourceName>movements</resourceName>
+        <resourceName>
+                /orgauthorities/*/items/
+            </resourceName>
         <action>
             <name>CREATE</name>
         </action>
@@ -1348,12 +1724,12 @@
         </action>
         <effect>PERMIT</effect>
         <tenant_id>1</tenant_id>
-        <createdAt>2010-06-09T12:04:57.281</createdAt>
+        <createdAt>2010-06-14T11:14:34.881</createdAt>
     </permission>
-    <permission csid="be88af98-a0fc-4d20-a2b8-8d513a16e72f">
+    <permission csid="9c6d48e9-4198-4ff5-9726-9fcab6be300b">
         <description>generated admin permission</description>
         <resourceName>
-                /movements/*/authorityrefs/
+                /orgauthorities/*/items/*/refobjs
             </resourceName>
         <action>
             <name>CREATE</name>
@@ -1372,11 +1748,11 @@
         </action>
         <effect>PERMIT</effect>
         <tenant_id>1</tenant_id>
-        <createdAt>2010-06-09T12:04:57.282</createdAt>
+        <createdAt>2010-06-14T11:14:34.881</createdAt>
     </permission>
-    <permission csid="8d20c65c-9431-43f5-8363-cff22f3f1636">
+    <permission csid="a17f6316-f5ba-4c74-8f69-397d4e01a7e4">
         <description>generated admin permission</description>
-        <resourceName>vocabularies</resourceName>
+        <resourceName>personauthorities</resourceName>
         <action>
             <name>CREATE</name>
         </action>
@@ -1394,11 +1770,13 @@
         </action>
         <effect>PERMIT</effect>
         <tenant_id>1</tenant_id>
-        <createdAt>2010-06-09T12:04:57.282</createdAt>
+        <createdAt>2010-06-14T11:14:34.881</createdAt>
     </permission>
-    <permission csid="baae576a-0002-4c7e-8f81-6b8b4de4e446">
+    <permission csid="2b1147d4-9a6a-4197-8e2d-0fae113dc14a">
         <description>generated admin permission</description>
-        <resourceName>vocabularyitems</resourceName>
+        <resourceName>
+                /personauthorities/*/items/
+            </resourceName>
         <action>
             <name>CREATE</name>
         </action>
@@ -1416,12 +1794,12 @@
         </action>
         <effect>PERMIT</effect>
         <tenant_id>1</tenant_id>
-        <createdAt>2010-06-09T12:04:57.282</createdAt>
+        <createdAt>2010-06-14T11:14:34.881</createdAt>
     </permission>
-    <permission csid="0a23b37e-7f61-4b7a-8675-6d5861f4cd70">
+    <permission csid="14b2f195-833f-4697-8517-fcdd7a98cd2c">
         <description>generated admin permission</description>
         <resourceName>
-                /vocabularies/*/items/
+                /personauthorities/*/items/*/refobjs
             </resourceName>
         <action>
             <name>CREATE</name>
@@ -1440,11 +1818,11 @@
         </action>
         <effect>PERMIT</effect>
         <tenant_id>1</tenant_id>
-        <createdAt>2010-06-09T12:04:57.282</createdAt>
+        <createdAt>2010-06-14T11:14:34.882</createdAt>
     </permission>
-    <permission csid="7ef5a389-13fd-4560-9c53-d4016d28fcc7">
+    <permission csid="16470305-fd33-4ab4-bc71-64408b0a87f7">
         <description>generated admin permission</description>
-        <resourceName>orgauthorities</resourceName>
+        <resourceName>persons</resourceName>
         <action>
             <name>CREATE</name>
         </action>
@@ -1462,12 +1840,12 @@
         </action>
         <effect>PERMIT</effect>
         <tenant_id>1</tenant_id>
-        <createdAt>2010-06-09T12:04:57.283</createdAt>
+        <createdAt>2010-06-14T11:14:34.882</createdAt>
     </permission>
-    <permission csid="a9378d8e-326b-455e-a6f5-c63b3edcb22c">
+    <permission csid="0d2d4594-e913-4948-871b-7ee07db7417d">
         <description>generated admin permission</description>
         <resourceName>
-                /orgauthorities/*/items/*/authorityrefs/
+                /personauthorities/*/items/
             </resourceName>
         <action>
             <name>CREATE</name>
@@ -1486,11 +1864,11 @@
         </action>
         <effect>PERMIT</effect>
         <tenant_id>1</tenant_id>
-        <createdAt>2010-06-09T12:04:57.283</createdAt>
+        <createdAt>2010-06-14T11:14:34.882</createdAt>
     </permission>
-    <permission csid="018c53e5-d25f-4c1b-bf63-2b0a0bc8e8cb">
+    <permission csid="b6fd9d4c-b6b2-4bb1-9826-104d409996e6">
         <description>generated admin permission</description>
-        <resourceName>organizations</resourceName>
+        <resourceName>locationauthorities</resourceName>
         <action>
             <name>CREATE</name>
         </action>
@@ -1508,12 +1886,12 @@
         </action>
         <effect>PERMIT</effect>
         <tenant_id>1</tenant_id>
-        <createdAt>2010-06-09T12:04:57.283</createdAt>
+        <createdAt>2010-06-14T11:14:34.882</createdAt>
     </permission>
-    <permission csid="c7a00064-ca3e-4f13-a5e1-22d4fba1bf0a">
+    <permission csid="b29dc31a-6ca8-4235-968e-b3e7586c490d">
         <description>generated admin permission</description>
         <resourceName>
-                /orgauthorities/*/items/
+                /locationauthorities/*/items/
             </resourceName>
         <action>
             <name>CREATE</name>
@@ -1532,13 +1910,11 @@
         </action>
         <effect>PERMIT</effect>
         <tenant_id>1</tenant_id>
-        <createdAt>2010-06-09T12:04:57.283</createdAt>
+        <createdAt>2010-06-14T11:14:34.882</createdAt>
     </permission>
-    <permission csid="9b8bd457-f8e6-408c-b9eb-dd67e4c278c2">
+    <permission csid="80dbadab-228a-4058-8239-e3d12102e7ed">
         <description>generated admin permission</description>
-        <resourceName>
-                /orgauthorities/*/items/*/refobjs
-            </resourceName>
+        <resourceName>locations</resourceName>
         <action>
             <name>CREATE</name>
         </action>
@@ -1556,11 +1932,11 @@
         </action>
         <effect>PERMIT</effect>
         <tenant_id>1</tenant_id>
-        <createdAt>2010-06-09T12:04:57.284</createdAt>
+        <createdAt>2010-06-14T11:14:34.883</createdAt>
     </permission>
-    <permission csid="97c0948d-fb9e-49d7-b748-86635a21c313">
+    <permission csid="a66de87b-ec2b-4b47-b3e5-2f0462475371">
         <description>generated admin permission</description>
-        <resourceName>personauthorities</resourceName>
+        <resourceName>acquisitions</resourceName>
         <action>
             <name>CREATE</name>
         </action>
@@ -1578,12 +1954,12 @@
         </action>
         <effect>PERMIT</effect>
         <tenant_id>1</tenant_id>
-        <createdAt>2010-06-09T12:04:57.284</createdAt>
+        <createdAt>2010-06-14T11:14:34.883</createdAt>
     </permission>
-    <permission csid="23d29e66-624e-4d57-8f94-e26e05747cee">
+    <permission csid="1e611f11-1ba6-4e35-9ded-24cbaaf23ca7">
         <description>generated admin permission</description>
         <resourceName>
-                /personauthorities/*/items/
+                /acquisitions/*/authorityrefs/
             </resourceName>
         <action>
             <name>CREATE</name>
@@ -1602,13 +1978,11 @@
         </action>
         <effect>PERMIT</effect>
         <tenant_id>1</tenant_id>
-        <createdAt>2010-06-09T12:04:57.284</createdAt>
+        <createdAt>2010-06-14T11:14:34.883</createdAt>
     </permission>
-    <permission csid="4b755790-bc41-4495-aa3f-a523427c0a60">
+    <permission csid="f6a3b97c-9993-4598-a5df-3767ea578570">
         <description>generated admin permission</description>
-        <resourceName>
-                /personauthorities/*/items/*/refobjs
-            </resourceName>
+        <resourceName>relations</resourceName>
         <action>
             <name>CREATE</name>
         </action>
@@ -1626,11 +2000,13 @@
         </action>
         <effect>PERMIT</effect>
         <tenant_id>1</tenant_id>
-        <createdAt>2010-06-09T12:04:57.284</createdAt>
+        <createdAt>2010-06-14T11:14:34.883</createdAt>
     </permission>
-    <permission csid="04f61718-653c-4d87-a0e6-9de5b7bbf34a">
+    <permission csid="3dbe2cfa-c07a-4b31-97f8-fc1b4ed64616">
         <description>generated admin permission</description>
-        <resourceName>persons</resourceName>
+        <resourceName>
+                /relations/object/*
+            </resourceName>
         <action>
             <name>CREATE</name>
         </action>
@@ -1648,12 +2024,12 @@
         </action>
         <effect>PERMIT</effect>
         <tenant_id>1</tenant_id>
-        <createdAt>2010-06-09T12:04:57.285</createdAt>
+        <createdAt>2010-06-14T11:14:34.883</createdAt>
     </permission>
-    <permission csid="a3a7c934-e6f5-42b2-bf6c-838cda7aed4c">
+    <permission csid="cb8cdae5-d4fb-4bd2-9258-4fd52ec2a06f">
         <description>generated admin permission</description>
         <resourceName>
-                /personauthorities/*/items/
+                /relations/object/*/type/*
             </resourceName>
         <action>
             <name>CREATE</name>
@@ -1672,11 +2048,13 @@
         </action>
         <effect>PERMIT</effect>
         <tenant_id>1</tenant_id>
-        <createdAt>2010-06-09T12:04:57.285</createdAt>
+        <createdAt>2010-06-14T11:14:34.884</createdAt>
     </permission>
-    <permission csid="6afe06d3-1063-4d8d-859d-6e2aac48aeed">
+    <permission csid="74d36c96-b826-46a9-b19b-8b717c27551e">
         <description>generated admin permission</description>
-        <resourceName>locationauthorities</resourceName>
+        <resourceName>
+                /relations/subject/*
+            </resourceName>
         <action>
             <name>CREATE</name>
         </action>
@@ -1694,12 +2072,12 @@
         </action>
         <effect>PERMIT</effect>
         <tenant_id>1</tenant_id>
-        <createdAt>2010-06-09T12:04:57.285</createdAt>
+        <createdAt>2010-06-14T11:14:34.884</createdAt>
     </permission>
-    <permission csid="5adb375f-343a-428d-9fc3-6fc57214cc46">
+    <permission csid="cb2eec62-1160-4103-86a0-1d65d87954c3">
         <description>generated admin permission</description>
         <resourceName>
-                /locationauthorities/*/items/
+                /relations/subject/*/type/*
             </resourceName>
         <action>
             <name>CREATE</name>
@@ -1718,11 +2096,13 @@
         </action>
         <effect>PERMIT</effect>
         <tenant_id>1</tenant_id>
-        <createdAt>2010-06-09T12:04:57.286</createdAt>
+        <createdAt>2010-06-14T11:14:34.884</createdAt>
     </permission>
-    <permission csid="4ff9d782-ff59-44f5-8c59-6ad046370177">
+    <permission csid="8033c19f-ae5b-43d5-a774-2b79d0fe87a8">
         <description>generated admin permission</description>
-        <resourceName>locations</resourceName>
+        <resourceName>
+                /relations/subject/*/type/*/object/*
+            </resourceName>
         <action>
             <name>CREATE</name>
         </action>
@@ -1740,11 +2120,13 @@
         </action>
         <effect>PERMIT</effect>
         <tenant_id>1</tenant_id>
-        <createdAt>2010-06-09T12:04:57.286</createdAt>
+        <createdAt>2010-06-14T11:14:34.884</createdAt>
     </permission>
-    <permission csid="c7fc2c86-e755-4f8c-a1ab-5e1bc5fcf556">
+    <permission csid="47ecf215-d9f0-4f00-ae60-43b9524f24d9">
         <description>generated admin permission</description>
-        <resourceName>acquisitions</resourceName>
+        <resourceName>
+                /relations/type/*
+            </resourceName>
         <action>
             <name>CREATE</name>
         </action>
@@ -1762,12 +2144,12 @@
         </action>
         <effect>PERMIT</effect>
         <tenant_id>1</tenant_id>
-        <createdAt>2010-06-09T12:04:57.286</createdAt>
+        <createdAt>2010-06-14T11:14:34.884</createdAt>
     </permission>
-    <permission csid="41edca48-9f20-42a7-af06-7e536f1bcff1">
+    <permission csid="01d1d644-1233-4673-8d98-7d0186379e23">
         <description>generated admin permission</description>
         <resourceName>
-                /acquisitions/*/authorityrefs/
+                /relations/type/*/object/*
             </resourceName>
         <action>
             <name>CREATE</name>
@@ -1786,11 +2168,13 @@
         </action>
         <effect>PERMIT</effect>
         <tenant_id>1</tenant_id>
-        <createdAt>2010-06-09T12:04:57.286</createdAt>
+        <createdAt>2010-06-14T11:14:34.885</createdAt>
     </permission>
-    <permission csid="0e642a75-309f-4354-bd30-69fa7ba319f6">
+    <permission csid="e475ed0c-0847-40b1-8587-a288db4cf2be">
         <description>generated admin permission</description>
-        <resourceName>relations</resourceName>
+        <resourceName>
+                /relations/type/*/subject/*
+            </resourceName>
         <action>
             <name>CREATE</name>
         </action>
@@ -1808,12 +2192,12 @@
         </action>
         <effect>PERMIT</effect>
         <tenant_id>1</tenant_id>
-        <createdAt>2010-06-09T12:04:57.287</createdAt>
+        <createdAt>2010-06-14T11:14:34.885</createdAt>
     </permission>
-    <permission csid="d94ebd08-277b-40ea-a655-c2bac9ee9af0">
+    <permission csid="8eed5af1-ff30-4877-9405-0e8da8d35b3f">
         <description>generated admin permission</description>
         <resourceName>
-                relations/subject/*/type/*/object/*
+                /relations/type/*/subject/*/object/*
             </resourceName>
         <action>
             <name>CREATE</name>
@@ -1832,9 +2216,9 @@
         </action>
         <effect>PERMIT</effect>
         <tenant_id>1</tenant_id>
-        <createdAt>2010-06-09T12:04:57.287</createdAt>
+        <createdAt>2010-06-14T11:14:34.885</createdAt>
     </permission>
-    <permission csid="ea1d3e08-46ea-4be3-9858-a93f260999e1">
+    <permission csid="f88aad7d-52f6-4622-9f63-37382f83caae">
         <description>generated admin permission</description>
         <resourceName>accounts</resourceName>
         <action>
@@ -1854,9 +2238,9 @@
         </action>
         <effect>PERMIT</effect>
         <tenant_id>1</tenant_id>
-        <createdAt>2010-06-09T12:04:57.287</createdAt>
+        <createdAt>2010-06-14T11:14:34.885</createdAt>
     </permission>
-    <permission csid="f79f2858-bfaf-422c-8490-20db274858ac">
+    <permission csid="096e6ba8-c0c4-4a5e-b6ae-dd73c44e6351">
         <description>generated admin permission</description>
         <resourceName>dimensions</resourceName>
         <action>
@@ -1876,9 +2260,9 @@
         </action>
         <effect>PERMIT</effect>
         <tenant_id>1</tenant_id>
-        <createdAt>2010-06-09T12:04:57.287</createdAt>
+        <createdAt>2010-06-14T11:14:34.885</createdAt>
     </permission>
-    <permission csid="b3af3ebb-8a1d-43bb-9cd6-cbbbd42957d1">
+    <permission csid="995a520f-2f8f-489f-bef1-2dc8edf13fa5">
         <description>generated admin permission</description>
         <resourceName>contacts</resourceName>
         <action>
@@ -1898,9 +2282,9 @@
         </action>
         <effect>PERMIT</effect>
         <tenant_id>1</tenant_id>
-        <createdAt>2010-06-09T12:04:57.288</createdAt>
+        <createdAt>2010-06-14T11:14:34.886</createdAt>
     </permission>
-    <permission csid="9ca70400-e0ee-4fe1-8c05-79cded28218a">
+    <permission csid="adc7794d-b09f-4dfb-9d63-ec1fe406d761">
         <description>generated admin permission</description>
         <resourceName>
                 /personauthorities/*/items/*/contacts
@@ -1922,9 +2306,9 @@
         </action>
         <effect>PERMIT</effect>
         <tenant_id>1</tenant_id>
-        <createdAt>2010-06-09T12:04:57.288</createdAt>
+        <createdAt>2010-06-14T11:14:34.886</createdAt>
     </permission>
-    <permission csid="3e181bcc-5346-4303-8ae7-f61218eddeeb">
+    <permission csid="7dc8fdd5-ad08-4c7e-aa00-c2d625bad83e">
         <description>generated admin permission</description>
         <resourceName>
                 /orgauthorities/*/items/*/contacts
@@ -1946,9 +2330,9 @@
         </action>
         <effect>PERMIT</effect>
         <tenant_id>1</tenant_id>
-        <createdAt>2010-06-09T12:04:57.288</createdAt>
+        <createdAt>2010-06-14T11:14:34.886</createdAt>
     </permission>
-    <permission csid="44fc3ac6-9171-4b12-91e7-d91db0c43245">
+    <permission csid="1d8cc60c-b508-4afa-a332-fcc78f79b1ab">
         <description>generated admin permission</description>
         <resourceName>notes</resourceName>
         <action>
@@ -1968,9 +2352,9 @@
         </action>
         <effect>PERMIT</effect>
         <tenant_id>1</tenant_id>
-        <createdAt>2010-06-09T12:04:57.288</createdAt>
+        <createdAt>2010-06-14T11:14:34.886</createdAt>
     </permission>
-    <permission csid="9210aac1-0a54-4937-98a6-93658b7f7544">
+    <permission csid="6fca8fa6-c8e4-4919-9c66-e03c1259268a">
         <description>generated admin permission</description>
         <resourceName>authorization/roles</resourceName>
         <action>
@@ -1990,9 +2374,9 @@
         </action>
         <effect>PERMIT</effect>
         <tenant_id>1</tenant_id>
-        <createdAt>2010-06-09T12:04:57.289</createdAt>
+        <createdAt>2010-06-14T11:14:34.886</createdAt>
     </permission>
-    <permission csid="a9b46797-66cd-4162-996a-72dcbdf74376">
+    <permission csid="55b2af98-4025-46f1-a593-3a2d5d41ae4d">
         <description>generated admin permission</description>
         <resourceName>authorization/permissions</resourceName>
         <action>
@@ -2012,9 +2396,9 @@
         </action>
         <effect>PERMIT</effect>
         <tenant_id>1</tenant_id>
-        <createdAt>2010-06-09T12:04:57.289</createdAt>
+        <createdAt>2010-06-14T11:14:34.887</createdAt>
     </permission>
-    <permission csid="8fe974c4-5b78-4314-8a82-47718864c3d8">
+    <permission csid="3b6c39aa-6019-4e47-90d4-0ccd613136cb">
         <description>generated admin permission</description>
         <resourceName>authorization/permissions/permroles</resourceName>
         <action>
@@ -2034,9 +2418,9 @@
         </action>
         <effect>PERMIT</effect>
         <tenant_id>1</tenant_id>
-        <createdAt>2010-06-09T12:04:57.289</createdAt>
+        <createdAt>2010-06-14T11:14:34.887</createdAt>
     </permission>
-    <permission csid="89add6ba-b859-4d89-b236-b67261abadb8">
+    <permission csid="afcd676a-5d42-4437-8db7-e841e8cf524b">
         <description>generated admin permission</description>
         <resourceName>
                 /authorization/permissions/*/permroles/
@@ -2058,9 +2442,9 @@
         </action>
         <effect>PERMIT</effect>
         <tenant_id>1</tenant_id>
-        <createdAt>2010-06-09T12:04:57.290</createdAt>
+        <createdAt>2010-06-14T11:14:34.887</createdAt>
     </permission>
-    <permission csid="35a63af4-c8f2-4d64-84a5-3877956d09c8">
+    <permission csid="911ac4d5-4d9f-45ca-ae1c-108fe857f4f5">
         <description>generated admin permission</description>
         <resourceName>accounts/accountroles</resourceName>
         <action>
@@ -2080,9 +2464,9 @@
         </action>
         <effect>PERMIT</effect>
         <tenant_id>1</tenant_id>
-        <createdAt>2010-06-09T12:04:57.290</createdAt>
+        <createdAt>2010-06-14T11:14:34.887</createdAt>
     </permission>
-    <permission csid="c17b9a66-43a6-4e5d-95fd-ae17b69cf8a3">
+    <permission csid="1bdd955c-52a1-477b-b1da-41cc0c4a703c">
         <description>generated admin permission</description>
         <resourceName>
                 /accounts/*/accountroles/
@@ -2104,9 +2488,9 @@
         </action>
         <effect>PERMIT</effect>
         <tenant_id>1</tenant_id>
-        <createdAt>2010-06-09T12:04:57.290</createdAt>
+        <createdAt>2010-06-14T11:14:34.887</createdAt>
     </permission>
-    <permission csid="0de0bc4a-617e-4979-87df-3369dd43a22c">
+    <permission csid="c06ef067-aa93-480f-8b0e-177a740302e9">
         <description>generated admin permission</description>
         <resourceName>authorization/roles/permroles</resourceName>
         <action>
@@ -2126,9 +2510,9 @@
         </action>
         <effect>PERMIT</effect>
         <tenant_id>1</tenant_id>
-        <createdAt>2010-06-09T12:04:57.290</createdAt>
+        <createdAt>2010-06-14T11:14:34.888</createdAt>
     </permission>
-    <permission csid="f2f1aa15-9090-4a2d-9014-50f34e961a57">
+    <permission csid="db89bc4f-fddf-474c-a40f-af1c1d9c9012">
         <description>generated admin permission</description>
         <resourceName>
                 /authorization/roles/*/permroles/
@@ -2150,9 +2534,9 @@
         </action>
         <effect>PERMIT</effect>
         <tenant_id>1</tenant_id>
-        <createdAt>2010-06-09T12:04:57.291</createdAt>
+        <createdAt>2010-06-14T11:14:34.888</createdAt>
     </permission>
-    <permission csid="98073abf-888d-4f00-8c19-38debcebf27f">
+    <permission csid="e321c586-2430-42c0-b749-576426a7e748">
         <description>generated readonly permission</description>
         <resourceName>idgenerators</resourceName>
         <action>
@@ -2163,9 +2547,9 @@
         </action>
         <effect>PERMIT</effect>
         <tenant_id>2</tenant_id>
-        <createdAt>2010-06-09T12:04:57.245</createdAt>
+        <createdAt>2010-06-14T11:14:34.864</createdAt>
     </permission>
-    <permission csid="f14e2b1b-3e14-4cff-917b-6df1cabd2f68">
+    <permission csid="08d46fe2-e630-4aa6-81c4-d7ff88425ff3">
         <description>generated readonly permission</description>
         <resourceName>id</resourceName>
         <action>
@@ -2176,9 +2560,9 @@
         </action>
         <effect>PERMIT</effect>
         <tenant_id>2</tenant_id>
-        <createdAt>2010-06-09T12:04:57.245</createdAt>
+        <createdAt>2010-06-14T11:14:34.865</createdAt>
     </permission>
-    <permission csid="cea5e92b-2b59-44f0-b302-fc4a7c7a4655">
+    <permission csid="39339b7f-7bdd-48a6-a08a-94ea9ec5dcdf">
         <description>generated readonly permission</description>
         <resourceName>
                 /idgenerators/*/ids
@@ -2191,9 +2575,9 @@
         </action>
         <effect>PERMIT</effect>
         <tenant_id>2</tenant_id>
-        <createdAt>2010-06-09T12:04:57.245</createdAt>
+        <createdAt>2010-06-14T11:14:34.865</createdAt>
     </permission>
-    <permission csid="3b821c8f-0d13-4065-acb6-8ff3b38988fb">
+    <permission csid="dab0cb0d-cec3-4993-8b57-612a3fc0f990">
         <description>generated readonly permission</description>
         <resourceName>collectionobjects</resourceName>
         <action>
@@ -2204,9 +2588,9 @@
         </action>
         <effect>PERMIT</effect>
         <tenant_id>2</tenant_id>
-        <createdAt>2010-06-09T12:04:57.245</createdAt>
+        <createdAt>2010-06-14T11:14:34.865</createdAt>
     </permission>
-    <permission csid="e82f31a6-5387-4293-80b8-0ad694e7b132">
+    <permission csid="a16d99c3-e235-42c5-bc13-ff06709ff46d">
         <description>generated readonly permission</description>
         <resourceName>
                 /collectionobjects/*/authorityrefs/
@@ -2219,9 +2603,9 @@
         </action>
         <effect>PERMIT</effect>
         <tenant_id>2</tenant_id>
-        <createdAt>2010-06-09T12:04:57.246</createdAt>
+        <createdAt>2010-06-14T11:14:34.865</createdAt>
     </permission>
-    <permission csid="2667726e-5406-4a05-9035-c79de29864d3">
+    <permission csid="bdd08bcc-d89c-4aa4-a03f-452da1e82939">
         <description>generated readonly permission</description>
         <resourceName>intakes</resourceName>
         <action>
@@ -2232,9 +2616,9 @@
         </action>
         <effect>PERMIT</effect>
         <tenant_id>2</tenant_id>
-        <createdAt>2010-06-09T12:04:57.246</createdAt>
+        <createdAt>2010-06-14T11:14:34.866</createdAt>
     </permission>
-    <permission csid="d1b8585b-5647-4243-b5da-ef89fbe7a45c">
+    <permission csid="adb7e196-8353-4ac9-859b-d80fdfbd9aa6">
         <description>generated readonly permission</description>
         <resourceName>
                 /intakes/*/authorityrefs/
@@ -2247,9 +2631,9 @@
         </action>
         <effect>PERMIT</effect>
         <tenant_id>2</tenant_id>
-        <createdAt>2010-06-09T12:04:57.246</createdAt>
+        <createdAt>2010-06-14T11:14:34.866</createdAt>
     </permission>
-    <permission csid="7d7ccb35-3272-4d74-a7a5-a40145454ff4">
+    <permission csid="860e93b0-4986-41db-9130-7ac6b7815bd4">
         <description>generated readonly permission</description>
         <resourceName>loansin</resourceName>
         <action>
@@ -2260,9 +2644,9 @@
         </action>
         <effect>PERMIT</effect>
         <tenant_id>2</tenant_id>
-        <createdAt>2010-06-09T12:04:57.247</createdAt>
+        <createdAt>2010-06-14T11:14:34.866</createdAt>
     </permission>
-    <permission csid="f094c722-7d5f-43f6-af7e-a77d752c935d">
+    <permission csid="d03040a4-1d57-4abc-8fc6-ff9b9477bffd">
         <description>generated readonly permission</description>
         <resourceName>
                 /loansin/*/authorityrefs/
@@ -2275,9 +2659,9 @@
         </action>
         <effect>PERMIT</effect>
         <tenant_id>2</tenant_id>
-        <createdAt>2010-06-09T12:04:57.247</createdAt>
+        <createdAt>2010-06-14T11:14:34.866</createdAt>
     </permission>
-    <permission csid="d4e6eb56-4616-45a0-b9e8-78c884830e6b">
+    <permission csid="c8d883dc-c07b-4d66-8df0-207108426257">
         <description>generated readonly permission</description>
         <resourceName>loansout</resourceName>
         <action>
@@ -2288,9 +2672,9 @@
         </action>
         <effect>PERMIT</effect>
         <tenant_id>2</tenant_id>
-        <createdAt>2010-06-09T12:04:57.247</createdAt>
+        <createdAt>2010-06-14T11:14:34.866</createdAt>
     </permission>
-    <permission csid="28b6d76d-a2ad-4f79-883e-f63a932f85eb">
+    <permission csid="086f839f-0783-4ff1-b5c6-be5f444da4f9">
         <description>generated readonly permission</description>
         <resourceName>
                 /loansout/*/authorityrefs/
@@ -2303,9 +2687,9 @@
         </action>
         <effect>PERMIT</effect>
         <tenant_id>2</tenant_id>
-        <createdAt>2010-06-09T12:04:57.248</createdAt>
+        <createdAt>2010-06-14T11:14:34.867</createdAt>
     </permission>
-    <permission csid="894f720a-d0df-4438-b0a8-625a23e38e26">
+    <permission csid="47a03c57-b6e7-4a50-a66d-e31ab60bf048">
         <description>generated readonly permission</description>
         <resourceName>movements</resourceName>
         <action>
@@ -2316,9 +2700,9 @@
         </action>
         <effect>PERMIT</effect>
         <tenant_id>2</tenant_id>
-        <createdAt>2010-06-09T12:04:57.248</createdAt>
+        <createdAt>2010-06-14T11:14:34.867</createdAt>
     </permission>
-    <permission csid="7aeda5a7-7997-4629-8c9e-0ff1ee2593b6">
+    <permission csid="8c13e4af-23ff-4aed-ba2d-716544647f58">
         <description>generated readonly permission</description>
         <resourceName>
                 /movements/*/authorityrefs/
@@ -2331,9 +2715,9 @@
         </action>
         <effect>PERMIT</effect>
         <tenant_id>2</tenant_id>
-        <createdAt>2010-06-09T12:04:57.257</createdAt>
+        <createdAt>2010-06-14T11:14:34.867</createdAt>
     </permission>
-    <permission csid="4dc16aef-1e22-4756-8c27-fc931dc10b6d">
+    <permission csid="40fcf4c1-71d2-463a-bc48-de499b5d3406">
         <description>generated readonly permission</description>
         <resourceName>vocabularies</resourceName>
         <action>
@@ -2344,9 +2728,9 @@
         </action>
         <effect>PERMIT</effect>
         <tenant_id>2</tenant_id>
-        <createdAt>2010-06-09T12:04:57.258</createdAt>
+        <createdAt>2010-06-14T11:14:34.867</createdAt>
     </permission>
-    <permission csid="0d1b57c4-178d-48b9-9423-0c01c7f8fb5f">
+    <permission csid="38718fe4-9f05-4dd7-9012-64c16eef4f90">
         <description>generated readonly permission</description>
         <resourceName>vocabularyitems</resourceName>
         <action>
@@ -2357,9 +2741,9 @@
         </action>
         <effect>PERMIT</effect>
         <tenant_id>2</tenant_id>
-        <createdAt>2010-06-09T12:04:57.258</createdAt>
+        <createdAt>2010-06-14T11:14:34.868</createdAt>
     </permission>
-    <permission csid="bd343314-2399-4bc2-8dc6-f241341592c5">
+    <permission csid="1d8a8147-07ef-44b8-9312-2fd1a7e06fdf">
         <description>generated readonly permission</description>
         <resourceName>
                 /vocabularies/*/items/
@@ -2372,9 +2756,9 @@
         </action>
         <effect>PERMIT</effect>
         <tenant_id>2</tenant_id>
-        <createdAt>2010-06-09T12:04:57.258</createdAt>
+        <createdAt>2010-06-14T11:14:34.868</createdAt>
     </permission>
-    <permission csid="cb5db5ab-8435-4b27-8970-5fb2287ba482">
+    <permission csid="8b2bd395-541e-4369-8743-b07e4840619a">
         <description>generated readonly permission</description>
         <resourceName>orgauthorities</resourceName>
         <action>
@@ -2385,9 +2769,9 @@
         </action>
         <effect>PERMIT</effect>
         <tenant_id>2</tenant_id>
-        <createdAt>2010-06-09T12:04:57.259</createdAt>
+        <createdAt>2010-06-14T11:14:34.868</createdAt>
     </permission>
-    <permission csid="87ff7ced-18ce-45d7-82f7-1a3abcfd858f">
+    <permission csid="e7304ccc-3696-4bdd-bdd9-db569c455582">
         <description>generated readonly permission</description>
         <resourceName>
                 /orgauthorities/*/items/*/authorityrefs/
@@ -2400,9 +2784,9 @@
         </action>
         <effect>PERMIT</effect>
         <tenant_id>2</tenant_id>
-        <createdAt>2010-06-09T12:04:57.259</createdAt>
+        <createdAt>2010-06-14T11:14:34.868</createdAt>
     </permission>
-    <permission csid="c6d94fa2-2ae0-4c8c-9cce-227189bf87b9">
+    <permission csid="98f764c6-33a3-4933-abd3-3ed2c85b916f">
         <description>generated readonly permission</description>
         <resourceName>organizations</resourceName>
         <action>
@@ -2413,9 +2797,9 @@
         </action>
         <effect>PERMIT</effect>
         <tenant_id>2</tenant_id>
-        <createdAt>2010-06-09T12:04:57.259</createdAt>
+        <createdAt>2010-06-14T11:14:34.868</createdAt>
     </permission>
-    <permission csid="690f031c-eb94-44d8-a843-83f35e84e871">
+    <permission csid="a4e0dfb5-8939-4f44-b23a-f88659ed8019">
         <description>generated readonly permission</description>
         <resourceName>
                 /orgauthorities/*/items/
@@ -2428,9 +2812,9 @@
         </action>
         <effect>PERMIT</effect>
         <tenant_id>2</tenant_id>
-        <createdAt>2010-06-09T12:04:57.260</createdAt>
+        <createdAt>2010-06-14T11:14:34.869</createdAt>
     </permission>
-    <permission csid="9d4ad424-ccce-401a-a954-8d5b796ad723">
+    <permission csid="512812bf-2587-4d6c-b87e-8dfbe43ad0e2">
         <description>generated readonly permission</description>
         <resourceName>
                 /orgauthorities/*/items/*/refobjs
@@ -2443,9 +2827,9 @@
         </action>
         <effect>PERMIT</effect>
         <tenant_id>2</tenant_id>
-        <createdAt>2010-06-09T12:04:57.260</createdAt>
+        <createdAt>2010-06-14T11:14:34.869</createdAt>
     </permission>
-    <permission csid="e7b233cb-239c-4ce6-b66c-4b7b8ebae3df">
+    <permission csid="d539d845-8151-48ec-910e-5c84e71f9a45">
         <description>generated readonly permission</description>
         <resourceName>personauthorities</resourceName>
         <action>
@@ -2456,9 +2840,9 @@
         </action>
         <effect>PERMIT</effect>
         <tenant_id>2</tenant_id>
-        <createdAt>2010-06-09T12:04:57.260</createdAt>
+        <createdAt>2010-06-14T11:14:34.869</createdAt>
     </permission>
-    <permission csid="c7deb54d-0ceb-4517-bfa1-da2d60563df9">
+    <permission csid="9316d182-7ec6-48d2-89be-5b7403d08e27">
         <description>generated readonly permission</description>
         <resourceName>
                 /personauthorities/*/items/
@@ -2471,9 +2855,9 @@
         </action>
         <effect>PERMIT</effect>
         <tenant_id>2</tenant_id>
-        <createdAt>2010-06-09T12:04:57.261</createdAt>
+        <createdAt>2010-06-14T11:14:34.870</createdAt>
     </permission>
-    <permission csid="d489ef98-d309-4ba7-af0a-ac3ddc30194d">
+    <permission csid="4a7fafa9-9d50-4097-beea-9df8bcca514d">
         <description>generated readonly permission</description>
         <resourceName>
                 /personauthorities/*/items/*/refobjs
@@ -2486,9 +2870,9 @@
         </action>
         <effect>PERMIT</effect>
         <tenant_id>2</tenant_id>
-        <createdAt>2010-06-09T12:04:57.261</createdAt>
+        <createdAt>2010-06-14T11:14:34.870</createdAt>
     </permission>
-    <permission csid="ba24b26b-ebc5-477b-9271-bbea2846c1b8">
+    <permission csid="d4eeaf6b-b988-4a0f-b507-42649c500b13">
         <description>generated readonly permission</description>
         <resourceName>persons</resourceName>
         <action>
@@ -2499,9 +2883,9 @@
         </action>
         <effect>PERMIT</effect>
         <tenant_id>2</tenant_id>
-        <createdAt>2010-06-09T12:04:57.261</createdAt>
+        <createdAt>2010-06-14T11:14:34.870</createdAt>
     </permission>
-    <permission csid="85222bfe-e079-4c2a-bf13-17d5e1d214ab">
+    <permission csid="90f99e52-15c9-4c81-a576-ebe32f81a86c">
         <description>generated readonly permission</description>
         <resourceName>
                 /personauthorities/*/items/
@@ -2514,9 +2898,9 @@
         </action>
         <effect>PERMIT</effect>
         <tenant_id>2</tenant_id>
-        <createdAt>2010-06-09T12:04:57.262</createdAt>
+        <createdAt>2010-06-14T11:14:34.870</createdAt>
     </permission>
-    <permission csid="9d08eb07-34a5-477f-a420-8d927bb37ee9">
+    <permission csid="486dd4ff-248a-4bca-9338-5ca691c32295">
         <description>generated readonly permission</description>
         <resourceName>locationauthorities</resourceName>
         <action>
@@ -2527,9 +2911,9 @@
         </action>
         <effect>PERMIT</effect>
         <tenant_id>2</tenant_id>
-        <createdAt>2010-06-09T12:04:57.262</createdAt>
+        <createdAt>2010-06-14T11:14:34.871</createdAt>
     </permission>
-    <permission csid="1c780d54-247e-4653-99da-ea395d741128">
+    <permission csid="318a6a2b-6932-4fcb-a836-fbbef4568077">
         <description>generated readonly permission</description>
         <resourceName>
                 /locationauthorities/*/items/
@@ -2542,9 +2926,9 @@
         </action>
         <effect>PERMIT</effect>
         <tenant_id>2</tenant_id>
-        <createdAt>2010-06-09T12:04:57.262</createdAt>
+        <createdAt>2010-06-14T11:14:34.871</createdAt>
     </permission>
-    <permission csid="7481a749-d1b6-4627-8a48-95356ee089a7">
+    <permission csid="68c1652b-dba0-476c-8b50-1d5729424f55">
         <description>generated readonly permission</description>
         <resourceName>locations</resourceName>
         <action>
@@ -2555,9 +2939,9 @@
         </action>
         <effect>PERMIT</effect>
         <tenant_id>2</tenant_id>
-        <createdAt>2010-06-09T12:04:57.263</createdAt>
+        <createdAt>2010-06-14T11:14:34.871</createdAt>
     </permission>
-    <permission csid="08b97355-3da2-4658-8692-8fc128e6baf5">
+    <permission csid="865d8115-dcdb-4063-a0af-8ea52b3adbe8">
         <description>generated readonly permission</description>
         <resourceName>acquisitions</resourceName>
         <action>
@@ -2568,9 +2952,9 @@
         </action>
         <effect>PERMIT</effect>
         <tenant_id>2</tenant_id>
-        <createdAt>2010-06-09T12:04:57.263</createdAt>
+        <createdAt>2010-06-14T11:14:34.871</createdAt>
     </permission>
-    <permission csid="afa330e9-0472-4615-b5a5-2ca6137bef85">
+    <permission csid="be4b72f4-12e3-40c6-a633-4be38e951077">
         <description>generated readonly permission</description>
         <resourceName>
                 /acquisitions/*/authorityrefs/
@@ -2583,9 +2967,9 @@
         </action>
         <effect>PERMIT</effect>
         <tenant_id>2</tenant_id>
-        <createdAt>2010-06-09T12:04:57.264</createdAt>
+        <createdAt>2010-06-14T11:14:34.871</createdAt>
     </permission>
-    <permission csid="975606e4-2357-4d2d-a9a5-3cb5e9bcf1b9">
+    <permission csid="63bcaf78-bf7f-4604-83bb-4a43bf5dff7d">
         <description>generated readonly permission</description>
         <resourceName>relations</resourceName>
         <action>
@@ -2596,12 +2980,132 @@
         </action>
         <effect>PERMIT</effect>
         <tenant_id>2</tenant_id>
-        <createdAt>2010-06-09T12:04:57.268</createdAt>
+        <createdAt>2010-06-14T11:14:34.872</createdAt>
+    </permission>
+    <permission csid="e26b68bd-4ad1-46c2-8b9a-6af46ac544ed">
+        <description>generated readonly permission</description>
+        <resourceName>
+                /relations/object/*
+            </resourceName>
+        <action>
+            <name>READ</name>
+        </action>
+        <action>
+            <name>SEARCH</name>
+        </action>
+        <effect>PERMIT</effect>
+        <tenant_id>2</tenant_id>
+        <createdAt>2010-06-14T11:14:34.872</createdAt>
+    </permission>
+    <permission csid="30954e8e-004c-450b-9055-584f49f163e9">
+        <description>generated readonly permission</description>
+        <resourceName>
+                /relations/object/*/type/*
+            </resourceName>
+        <action>
+            <name>READ</name>
+        </action>
+        <action>
+            <name>SEARCH</name>
+        </action>
+        <effect>PERMIT</effect>
+        <tenant_id>2</tenant_id>
+        <createdAt>2010-06-14T11:14:34.872</createdAt>
+    </permission>
+    <permission csid="9f78b49d-7431-4790-8281-ede335a50984">
+        <description>generated readonly permission</description>
+        <resourceName>
+                /relations/subject/*
+            </resourceName>
+        <action>
+            <name>READ</name>
+        </action>
+        <action>
+            <name>SEARCH</name>
+        </action>
+        <effect>PERMIT</effect>
+        <tenant_id>2</tenant_id>
+        <createdAt>2010-06-14T11:14:34.873</createdAt>
+    </permission>
+    <permission csid="bb21d239-2478-4ffe-a3f2-6195dee4a548">
+        <description>generated readonly permission</description>
+        <resourceName>
+                /relations/subject/*/type/*
+            </resourceName>
+        <action>
+            <name>READ</name>
+        </action>
+        <action>
+            <name>SEARCH</name>
+        </action>
+        <effect>PERMIT</effect>
+        <tenant_id>2</tenant_id>
+        <createdAt>2010-06-14T11:14:34.873</createdAt>
+    </permission>
+    <permission csid="5b288cd6-d424-4e93-a992-edf27af45128">
+        <description>generated readonly permission</description>
+        <resourceName>
+                /relations/subject/*/type/*/object/*
+            </resourceName>
+        <action>
+            <name>READ</name>
+        </action>
+        <action>
+            <name>SEARCH</name>
+        </action>
+        <effect>PERMIT</effect>
+        <tenant_id>2</tenant_id>
+        <createdAt>2010-06-14T11:14:34.873</createdAt>
+    </permission>
+    <permission csid="ac3a071c-c330-4d88-b6af-42c7452b0319">
+        <description>generated readonly permission</description>
+        <resourceName>
+                /relations/type/*
+            </resourceName>
+        <action>
+            <name>READ</name>
+        </action>
+        <action>
+            <name>SEARCH</name>
+        </action>
+        <effect>PERMIT</effect>
+        <tenant_id>2</tenant_id>
+        <createdAt>2010-06-14T11:14:34.873</createdAt>
+    </permission>
+    <permission csid="f62eacf7-22b9-4645-ba7e-ce9ff6d0fb17">
+        <description>generated readonly permission</description>
+        <resourceName>
+                /relations/type/*/object/*
+            </resourceName>
+        <action>
+            <name>READ</name>
+        </action>
+        <action>
+            <name>SEARCH</name>
+        </action>
+        <effect>PERMIT</effect>
+        <tenant_id>2</tenant_id>
+        <createdAt>2010-06-14T11:14:34.874</createdAt>
+    </permission>
+    <permission csid="971be36e-03bb-429f-99c7-bac9d4f70946">
+        <description>generated readonly permission</description>
+        <resourceName>
+                /relations/type/*/subject/*
+            </resourceName>
+        <action>
+            <name>READ</name>
+        </action>
+        <action>
+            <name>SEARCH</name>
+        </action>
+        <effect>PERMIT</effect>
+        <tenant_id>2</tenant_id>
+        <createdAt>2010-06-14T11:14:34.874</createdAt>
     </permission>
-    <permission csid="3b0120a4-380a-4834-bf42-e72045445224">
+    <permission csid="2b5fca54-1784-4e09-9855-dd26b702843f">
         <description>generated readonly permission</description>
         <resourceName>
-                relations/subject/*/type/*/object/*
+                /relations/type/*/subject/*/object/*
             </resourceName>
         <action>
             <name>READ</name>
@@ -2611,9 +3115,9 @@
         </action>
         <effect>PERMIT</effect>
         <tenant_id>2</tenant_id>
-        <createdAt>2010-06-09T12:04:57.268</createdAt>
+        <createdAt>2010-06-14T11:14:34.874</createdAt>
     </permission>
-    <permission csid="49bf8151-666c-42f6-95df-f23a9e96280e">
+    <permission csid="a6c84692-086d-4d4f-865f-ec985705ec40">
         <description>generated readonly permission</description>
         <resourceName>accounts</resourceName>
         <action>
@@ -2624,9 +3128,9 @@
         </action>
         <effect>PERMIT</effect>
         <tenant_id>2</tenant_id>
-        <createdAt>2010-06-09T12:04:57.269</createdAt>
+        <createdAt>2010-06-14T11:14:34.874</createdAt>
     </permission>
-    <permission csid="c2d2e876-bb3e-4f06-a198-814721600cf0">
+    <permission csid="9ab95f1b-1614-4f97-b7dd-20a9c9631234">
         <description>generated readonly permission</description>
         <resourceName>dimensions</resourceName>
         <action>
@@ -2637,9 +3141,9 @@
         </action>
         <effect>PERMIT</effect>
         <tenant_id>2</tenant_id>
-        <createdAt>2010-06-09T12:04:57.271</createdAt>
+        <createdAt>2010-06-14T11:14:34.875</createdAt>
     </permission>
-    <permission csid="9f37d080-26fa-45ef-be95-a495ab92e553">
+    <permission csid="3a095ad3-7df7-45c8-a8fc-bde2b4a98c27">
         <description>generated readonly permission</description>
         <resourceName>contacts</resourceName>
         <action>
@@ -2650,9 +3154,9 @@
         </action>
         <effect>PERMIT</effect>
         <tenant_id>2</tenant_id>
-        <createdAt>2010-06-09T12:04:57.271</createdAt>
+        <createdAt>2010-06-14T11:14:34.875</createdAt>
     </permission>
-    <permission csid="70f4b500-85ce-4939-8797-63a5a2858131">
+    <permission csid="6a06422b-3272-4156-8553-bb8f31054c6e">
         <description>generated readonly permission</description>
         <resourceName>
                 /personauthorities/*/items/*/contacts
@@ -2665,9 +3169,9 @@
         </action>
         <effect>PERMIT</effect>
         <tenant_id>2</tenant_id>
-        <createdAt>2010-06-09T12:04:57.271</createdAt>
+        <createdAt>2010-06-14T11:14:34.875</createdAt>
     </permission>
-    <permission csid="4903240c-2d6c-4063-8d5f-b47cd0d705fa">
+    <permission csid="fad6b2e8-3066-4413-840f-528aad1b1f6c">
         <description>generated readonly permission</description>
         <resourceName>
                 /orgauthorities/*/items/*/contacts
@@ -2680,9 +3184,9 @@
         </action>
         <effect>PERMIT</effect>
         <tenant_id>2</tenant_id>
-        <createdAt>2010-06-09T12:04:57.272</createdAt>
+        <createdAt>2010-06-14T11:14:34.875</createdAt>
     </permission>
-    <permission csid="0a2808d2-75df-458f-9bc0-4e16950aa8f6">
+    <permission csid="732f97f0-6d69-47ba-9732-c1423e3227da">
         <description>generated readonly permission</description>
         <resourceName>notes</resourceName>
         <action>
@@ -2693,9 +3197,9 @@
         </action>
         <effect>PERMIT</effect>
         <tenant_id>2</tenant_id>
-        <createdAt>2010-06-09T12:04:57.272</createdAt>
+        <createdAt>2010-06-14T11:14:34.875</createdAt>
     </permission>
-    <permission csid="86b629b9-44ec-4b10-b87c-01cde9cf6377">
+    <permission csid="c9f23278-e607-44c0-8b24-6e89add3ff0d">
         <description>generated readonly permission</description>
         <resourceName>authorization/roles</resourceName>
         <action>
@@ -2706,9 +3210,9 @@
         </action>
         <effect>PERMIT</effect>
         <tenant_id>2</tenant_id>
-        <createdAt>2010-06-09T12:04:57.273</createdAt>
+        <createdAt>2010-06-14T11:14:34.876</createdAt>
     </permission>
-    <permission csid="e3afa6b4-c32d-4188-b2b7-3b999679d194">
+    <permission csid="bc025d36-19a5-4e36-93a1-0cbc1ccede52">
         <description>generated readonly permission</description>
         <resourceName>authorization/permissions</resourceName>
         <action>
@@ -2719,9 +3223,9 @@
         </action>
         <effect>PERMIT</effect>
         <tenant_id>2</tenant_id>
-        <createdAt>2010-06-09T12:04:57.273</createdAt>
+        <createdAt>2010-06-14T11:14:34.876</createdAt>
     </permission>
-    <permission csid="b3926a79-b7be-4d9f-b606-d810b580d7b3">
+    <permission csid="461d7408-c804-49f8-af7c-7b401a8e518c">
         <description>generated readonly permission</description>
         <resourceName>authorization/permissions/permroles</resourceName>
         <action>
@@ -2732,9 +3236,9 @@
         </action>
         <effect>PERMIT</effect>
         <tenant_id>2</tenant_id>
-        <createdAt>2010-06-09T12:04:57.273</createdAt>
+        <createdAt>2010-06-14T11:14:34.876</createdAt>
     </permission>
-    <permission csid="1de56ea2-3074-4d86-a786-b6b7c0f138b1">
+    <permission csid="8296e36b-f6bb-4b51-90da-f74d7b1e8472">
         <description>generated readonly permission</description>
         <resourceName>
                 /authorization/permissions/*/permroles/
@@ -2747,9 +3251,9 @@
         </action>
         <effect>PERMIT</effect>
         <tenant_id>2</tenant_id>
-        <createdAt>2010-06-09T12:04:57.274</createdAt>
+        <createdAt>2010-06-14T11:14:34.876</createdAt>
     </permission>
-    <permission csid="0e199368-f16d-44d1-9d88-cc8d89331b5d">
+    <permission csid="a1246699-d944-460b-a1c8-3559726eaaf0">
         <description>generated readonly permission</description>
         <resourceName>accounts/accountroles</resourceName>
         <action>
@@ -2760,9 +3264,9 @@
         </action>
         <effect>PERMIT</effect>
         <tenant_id>2</tenant_id>
-        <createdAt>2010-06-09T12:04:57.274</createdAt>
+        <createdAt>2010-06-14T11:14:34.876</createdAt>
     </permission>
-    <permission csid="6637af57-7731-4615-bcf4-4755638a41ec">
+    <permission csid="b465403b-df78-412b-945e-da9cd7aa7fae">
         <description>generated readonly permission</description>
         <resourceName>
                 /accounts/*/accountroles/
@@ -2775,9 +3279,9 @@
         </action>
         <effect>PERMIT</effect>
         <tenant_id>2</tenant_id>
-        <createdAt>2010-06-09T12:04:57.274</createdAt>
+        <createdAt>2010-06-14T11:14:34.877</createdAt>
     </permission>
-    <permission csid="617e73b5-7859-4e5f-999f-f49455b1b535">
+    <permission csid="06fc1611-5945-4171-b0dd-24d6c09076ae">
         <description>generated readonly permission</description>
         <resourceName>authorization/roles/permroles</resourceName>
         <action>
@@ -2788,9 +3292,9 @@
         </action>
         <effect>PERMIT</effect>
         <tenant_id>2</tenant_id>
-        <createdAt>2010-06-09T12:04:57.275</createdAt>
+        <createdAt>2010-06-14T11:14:34.877</createdAt>
     </permission>
-    <permission csid="6db54902-aaca-4c5c-9a00-446a972877ae">
+    <permission csid="6faa1e46-187e-404b-b6a0-36e7939e75f6">
         <description>generated readonly permission</description>
         <resourceName>
                 /authorization/roles/*/permroles/
@@ -2803,9 +3307,9 @@
         </action>
         <effect>PERMIT</effect>
         <tenant_id>2</tenant_id>
-        <createdAt>2010-06-09T12:04:57.275</createdAt>
+        <createdAt>2010-06-14T11:14:34.877</createdAt>
     </permission>
-    <permission csid="8c293c6a-9869-48ba-9531-a55df3ad6226">
+    <permission csid="dae14257-70cd-4265-bd04-d6b8df323688">
         <description>generated readonly permission</description>
         <resourceName>idgenerators</resourceName>
         <action>
@@ -2816,9 +3320,9 @@
         </action>
         <effect>PERMIT</effect>
         <tenant_id>1</tenant_id>
-        <createdAt>2010-06-09T12:04:57.291</createdAt>
+        <createdAt>2010-06-14T11:14:34.888</createdAt>
     </permission>
-    <permission csid="26ada9c0-706a-4644-ba58-a65511dc96c2">
+    <permission csid="ef945684-dd18-47cb-9820-0e92d5dbfe51">
         <description>generated readonly permission</description>
         <resourceName>id</resourceName>
         <action>
@@ -2829,9 +3333,9 @@
         </action>
         <effect>PERMIT</effect>
         <tenant_id>1</tenant_id>
-        <createdAt>2010-06-09T12:04:57.291</createdAt>
+        <createdAt>2010-06-14T11:14:34.888</createdAt>
     </permission>
-    <permission csid="f6f7ff93-8f5c-4632-bde0-14a6608b3db9">
+    <permission csid="36ae518f-5dc4-4842-9cfc-88f85adcfc66">
         <description>generated readonly permission</description>
         <resourceName>
                 /idgenerators/*/ids
@@ -2844,9 +3348,9 @@
         </action>
         <effect>PERMIT</effect>
         <tenant_id>1</tenant_id>
-        <createdAt>2010-06-09T12:04:57.291</createdAt>
+        <createdAt>2010-06-14T11:14:34.888</createdAt>
     </permission>
-    <permission csid="fccb3c13-19ba-4042-9800-bcb41d6401cb">
+    <permission csid="fb612d1d-8bc1-4120-9540-b7923f34f0e8">
         <description>generated readonly permission</description>
         <resourceName>collectionobjects</resourceName>
         <action>
@@ -2857,9 +3361,9 @@
         </action>
         <effect>PERMIT</effect>
         <tenant_id>1</tenant_id>
-        <createdAt>2010-06-09T12:04:57.292</createdAt>
+        <createdAt>2010-06-14T11:14:34.889</createdAt>
     </permission>
-    <permission csid="ed79d51d-e0b2-480d-8794-068e761680db">
+    <permission csid="c898724b-9b3e-4195-a64f-f115baa5b195">
         <description>generated readonly permission</description>
         <resourceName>
                 /collectionobjects/*/authorityrefs/
@@ -2872,9 +3376,9 @@
         </action>
         <effect>PERMIT</effect>
         <tenant_id>1</tenant_id>
-        <createdAt>2010-06-09T12:04:57.292</createdAt>
+        <createdAt>2010-06-14T11:14:34.889</createdAt>
     </permission>
-    <permission csid="096f86d8-f09e-4b39-a54a-47b0c65ff6a1">
+    <permission csid="2679e06e-6d70-4dc6-aa4e-0923d65f0be8">
         <description>generated readonly permission</description>
         <resourceName>intakes</resourceName>
         <action>
@@ -2885,9 +3389,9 @@
         </action>
         <effect>PERMIT</effect>
         <tenant_id>1</tenant_id>
-        <createdAt>2010-06-09T12:04:57.292</createdAt>
+        <createdAt>2010-06-14T11:14:34.889</createdAt>
     </permission>
-    <permission csid="7c59900c-0ae1-4aa9-b673-cee98ddaa423">
+    <permission csid="41be903c-20a8-468e-b23e-545784c55120">
         <description>generated readonly permission</description>
         <resourceName>
                 /intakes/*/authorityrefs/
@@ -2900,9 +3404,9 @@
         </action>
         <effect>PERMIT</effect>
         <tenant_id>1</tenant_id>
-        <createdAt>2010-06-09T12:04:57.292</createdAt>
+        <createdAt>2010-06-14T11:14:34.889</createdAt>
     </permission>
-    <permission csid="b21411fc-abe3-42ed-ab7f-5a406d301a9e">
+    <permission csid="b83347b9-62f9-4d12-ab88-67ee25544482">
         <description>generated readonly permission</description>
         <resourceName>loansin</resourceName>
         <action>
@@ -2913,9 +3417,9 @@
         </action>
         <effect>PERMIT</effect>
         <tenant_id>1</tenant_id>
-        <createdAt>2010-06-09T12:04:57.293</createdAt>
+        <createdAt>2010-06-14T11:14:34.889</createdAt>
     </permission>
-    <permission csid="c25b5a9e-1b2b-4793-b9f0-b2a75eb0371e">
+    <permission csid="af8adb6c-e517-4f76-aefc-3f98b16eaca7">
         <description>generated readonly permission</description>
         <resourceName>
                 /loansin/*/authorityrefs/
@@ -2928,9 +3432,9 @@
         </action>
         <effect>PERMIT</effect>
         <tenant_id>1</tenant_id>
-        <createdAt>2010-06-09T12:04:57.293</createdAt>
+        <createdAt>2010-06-14T11:14:34.890</createdAt>
     </permission>
-    <permission csid="a78c8a08-8160-48dc-8a87-fcb2dfd7bd1a">
+    <permission csid="12ad496e-0ddd-491c-8fc6-bdd95180700b">
         <description>generated readonly permission</description>
         <resourceName>loansout</resourceName>
         <action>
@@ -2941,9 +3445,9 @@
         </action>
         <effect>PERMIT</effect>
         <tenant_id>1</tenant_id>
-        <createdAt>2010-06-09T12:04:57.294</createdAt>
+        <createdAt>2010-06-14T11:14:34.890</createdAt>
     </permission>
-    <permission csid="b9197d1c-508d-4202-99ad-c510495a0950">
+    <permission csid="9ad3829d-6583-4906-bf8d-6b098246d154">
         <description>generated readonly permission</description>
         <resourceName>
                 /loansout/*/authorityrefs/
@@ -2956,9 +3460,9 @@
         </action>
         <effect>PERMIT</effect>
         <tenant_id>1</tenant_id>
-        <createdAt>2010-06-09T12:04:57.294</createdAt>
+        <createdAt>2010-06-14T11:14:34.890</createdAt>
     </permission>
-    <permission csid="9d741d9a-4730-413f-8650-c42f808d664b">
+    <permission csid="9769f7ea-7ecd-413d-814d-3a15701b9be0">
         <description>generated readonly permission</description>
         <resourceName>movements</resourceName>
         <action>
@@ -2969,9 +3473,9 @@
         </action>
         <effect>PERMIT</effect>
         <tenant_id>1</tenant_id>
-        <createdAt>2010-06-09T12:04:57.294</createdAt>
+        <createdAt>2010-06-14T11:14:34.890</createdAt>
     </permission>
-    <permission csid="b1f6df3e-1f08-41a9-8d0c-c09d8e46bbe6">
+    <permission csid="dc08970a-11ba-48bc-a0fc-f3584757844b">
         <description>generated readonly permission</description>
         <resourceName>
                 /movements/*/authorityrefs/
@@ -2984,9 +3488,9 @@
         </action>
         <effect>PERMIT</effect>
         <tenant_id>1</tenant_id>
-        <createdAt>2010-06-09T12:04:57.295</createdAt>
+        <createdAt>2010-06-14T11:14:34.890</createdAt>
     </permission>
-    <permission csid="b273a380-4c2e-4440-a15f-451dbe35723c">
+    <permission csid="0cc45625-5602-4847-80f2-138410497249">
         <description>generated readonly permission</description>
         <resourceName>vocabularies</resourceName>
         <action>
@@ -2997,9 +3501,9 @@
         </action>
         <effect>PERMIT</effect>
         <tenant_id>1</tenant_id>
-        <createdAt>2010-06-09T12:04:57.295</createdAt>
+        <createdAt>2010-06-14T11:14:34.891</createdAt>
     </permission>
-    <permission csid="7332cffe-7b60-4b37-905b-63ddec4d5037">
+    <permission csid="67254a46-3c03-458d-9cd8-3ac161a99b54">
         <description>generated readonly permission</description>
         <resourceName>vocabularyitems</resourceName>
         <action>
@@ -3010,9 +3514,9 @@
         </action>
         <effect>PERMIT</effect>
         <tenant_id>1</tenant_id>
-        <createdAt>2010-06-09T12:04:57.295</createdAt>
+        <createdAt>2010-06-14T11:14:34.891</createdAt>
     </permission>
-    <permission csid="fd3141a6-8898-4da1-a08b-328ea9e9f406">
+    <permission csid="57faed1b-d4d3-4db7-b54f-2806827fc52a">
         <description>generated readonly permission</description>
         <resourceName>
                 /vocabularies/*/items/
@@ -3025,9 +3529,9 @@
         </action>
         <effect>PERMIT</effect>
         <tenant_id>1</tenant_id>
-        <createdAt>2010-06-09T12:04:57.295</createdAt>
+        <createdAt>2010-06-14T11:14:34.891</createdAt>
     </permission>
-    <permission csid="be1c5032-0c58-40ff-ba26-96e151c42c98">
+    <permission csid="843f8ef9-2dda-48db-ab9b-de85ef4e7aa5">
         <description>generated readonly permission</description>
         <resourceName>orgauthorities</resourceName>
         <action>
@@ -3038,9 +3542,9 @@
         </action>
         <effect>PERMIT</effect>
         <tenant_id>1</tenant_id>
-        <createdAt>2010-06-09T12:04:57.296</createdAt>
+        <createdAt>2010-06-14T11:14:34.891</createdAt>
     </permission>
-    <permission csid="c03fbda9-af3f-493a-9ba6-4ff863792230">
+    <permission csid="20a5fca1-1642-41bf-825e-04e22f9268c6">
         <description>generated readonly permission</description>
         <resourceName>
                 /orgauthorities/*/items/*/authorityrefs/
@@ -3053,9 +3557,9 @@
         </action>
         <effect>PERMIT</effect>
         <tenant_id>1</tenant_id>
-        <createdAt>2010-06-09T12:04:57.296</createdAt>
+        <createdAt>2010-06-14T11:14:34.891</createdAt>
     </permission>
-    <permission csid="d8b8989d-a3ec-4427-8623-58450124b524">
+    <permission csid="00a752c8-4d18-40bd-8f2b-36137516ea5a">
         <description>generated readonly permission</description>
         <resourceName>organizations</resourceName>
         <action>
@@ -3066,9 +3570,9 @@
         </action>
         <effect>PERMIT</effect>
         <tenant_id>1</tenant_id>
-        <createdAt>2010-06-09T12:04:57.296</createdAt>
+        <createdAt>2010-06-14T11:14:34.892</createdAt>
     </permission>
-    <permission csid="8fa48282-118c-4772-a9b5-ecad85d87567">
+    <permission csid="702522ff-f402-4ea4-9461-97f4d219e38e">
         <description>generated readonly permission</description>
         <resourceName>
                 /orgauthorities/*/items/
@@ -3081,9 +3585,9 @@
         </action>
         <effect>PERMIT</effect>
         <tenant_id>1</tenant_id>
-        <createdAt>2010-06-09T12:04:57.297</createdAt>
+        <createdAt>2010-06-14T11:14:34.892</createdAt>
     </permission>
-    <permission csid="132b61b6-03df-42d9-84fd-61be2a1b6dc5">
+    <permission csid="8edf2336-8012-4e82-87de-e259984c87e9">
         <description>generated readonly permission</description>
         <resourceName>
                 /orgauthorities/*/items/*/refobjs
@@ -3096,9 +3600,9 @@
         </action>
         <effect>PERMIT</effect>
         <tenant_id>1</tenant_id>
-        <createdAt>2010-06-09T12:04:57.298</createdAt>
+        <createdAt>2010-06-14T11:14:34.892</createdAt>
     </permission>
-    <permission csid="75e53342-f12e-4aa7-a4fb-56fc3b681fa6">
+    <permission csid="aaaa4a45-e84f-4fea-8a08-e96161296678">
         <description>generated readonly permission</description>
         <resourceName>personauthorities</resourceName>
         <action>
@@ -3109,9 +3613,9 @@
         </action>
         <effect>PERMIT</effect>
         <tenant_id>1</tenant_id>
-        <createdAt>2010-06-09T12:04:57.298</createdAt>
+        <createdAt>2010-06-14T11:14:34.892</createdAt>
     </permission>
-    <permission csid="d7b0b6bc-1fff-41f5-b4b8-a2b0ea975c64">
+    <permission csid="f82367c7-8c63-4407-89b5-52cd6885fbc1">
         <description>generated readonly permission</description>
         <resourceName>
                 /personauthorities/*/items/
@@ -3124,9 +3628,9 @@
         </action>
         <effect>PERMIT</effect>
         <tenant_id>1</tenant_id>
-        <createdAt>2010-06-09T12:04:57.298</createdAt>
+        <createdAt>2010-06-14T11:14:34.893</createdAt>
     </permission>
-    <permission csid="e5173476-4cc3-4461-a6f7-ba9031cef9c6">
+    <permission csid="18cb3027-92ff-40a9-8257-67565cc0f314">
         <description>generated readonly permission</description>
         <resourceName>
                 /personauthorities/*/items/*/refobjs
@@ -3139,9 +3643,9 @@
         </action>
         <effect>PERMIT</effect>
         <tenant_id>1</tenant_id>
-        <createdAt>2010-06-09T12:04:57.298</createdAt>
+        <createdAt>2010-06-14T11:14:34.893</createdAt>
     </permission>
-    <permission csid="c9a5be9a-5278-4593-b490-8fd2ff965609">
+    <permission csid="acc3b715-ca38-479c-a7f6-91c9d52f4d51">
         <description>generated readonly permission</description>
         <resourceName>persons</resourceName>
         <action>
@@ -3152,9 +3656,9 @@
         </action>
         <effect>PERMIT</effect>
         <tenant_id>1</tenant_id>
-        <createdAt>2010-06-09T12:04:57.298</createdAt>
+        <createdAt>2010-06-14T11:14:34.893</createdAt>
     </permission>
-    <permission csid="aa455324-692a-4b4b-b588-1d1488c3600e">
+    <permission csid="6f951805-2487-4dcd-904a-b91826a3652f">
         <description>generated readonly permission</description>
         <resourceName>
                 /personauthorities/*/items/
@@ -3167,9 +3671,9 @@
         </action>
         <effect>PERMIT</effect>
         <tenant_id>1</tenant_id>
-        <createdAt>2010-06-09T12:04:57.299</createdAt>
+        <createdAt>2010-06-14T11:14:34.893</createdAt>
     </permission>
-    <permission csid="61775707-4f82-4d9c-accb-b2553b51c991">
+    <permission csid="31befe05-de12-41be-9ba2-87f8389c0505">
         <description>generated readonly permission</description>
         <resourceName>locationauthorities</resourceName>
         <action>
@@ -3180,9 +3684,9 @@
         </action>
         <effect>PERMIT</effect>
         <tenant_id>1</tenant_id>
-        <createdAt>2010-06-09T12:04:57.299</createdAt>
+        <createdAt>2010-06-14T11:14:34.894</createdAt>
     </permission>
-    <permission csid="d301837e-0da3-4c45-ad18-0c05e095277e">
+    <permission csid="c1e2d3d2-6379-4d04-8246-45c77532979b">
         <description>generated readonly permission</description>
         <resourceName>
                 /locationauthorities/*/items/
@@ -3195,9 +3699,9 @@
         </action>
         <effect>PERMIT</effect>
         <tenant_id>1</tenant_id>
-        <createdAt>2010-06-09T12:04:57.299</createdAt>
+        <createdAt>2010-06-14T11:14:34.894</createdAt>
     </permission>
-    <permission csid="4d562791-ae17-4c2c-a9fa-45fd2b9ccb92">
+    <permission csid="67b2cad8-9589-4843-9363-7442b6b9cd5f">
         <description>generated readonly permission</description>
         <resourceName>locations</resourceName>
         <action>
@@ -3208,9 +3712,9 @@
         </action>
         <effect>PERMIT</effect>
         <tenant_id>1</tenant_id>
-        <createdAt>2010-06-09T12:04:57.300</createdAt>
+        <createdAt>2010-06-14T11:14:34.894</createdAt>
     </permission>
-    <permission csid="46383746-c96b-4df8-9964-20b63adcc821">
+    <permission csid="1b02adb2-49d7-4f21-a444-6af028149e03">
         <description>generated readonly permission</description>
         <resourceName>acquisitions</resourceName>
         <action>
@@ -3221,9 +3725,9 @@
         </action>
         <effect>PERMIT</effect>
         <tenant_id>1</tenant_id>
-        <createdAt>2010-06-09T12:04:57.300</createdAt>
+        <createdAt>2010-06-14T11:14:34.894</createdAt>
     </permission>
-    <permission csid="f98a8c6e-5b28-44c7-a7c6-cb58b450b496">
+    <permission csid="b94ee08f-8d1d-48e7-ba41-603c79a5e21c">
         <description>generated readonly permission</description>
         <resourceName>
                 /acquisitions/*/authorityrefs/
@@ -3236,9 +3740,9 @@
         </action>
         <effect>PERMIT</effect>
         <tenant_id>1</tenant_id>
-        <createdAt>2010-06-09T12:04:57.300</createdAt>
+        <createdAt>2010-06-14T11:14:34.894</createdAt>
     </permission>
-    <permission csid="b676b0b8-5931-4241-a498-18bc171c7b3b">
+    <permission csid="2d10ecd1-2f03-476b-985a-cca3c96544cc">
         <description>generated readonly permission</description>
         <resourceName>relations</resourceName>
         <action>
@@ -3249,12 +3753,132 @@
         </action>
         <effect>PERMIT</effect>
         <tenant_id>1</tenant_id>
-        <createdAt>2010-06-09T12:04:57.300</createdAt>
+        <createdAt>2010-06-14T11:14:34.895</createdAt>
+    </permission>
+    <permission csid="df70e266-1ee9-44d7-89d4-86d1e9aee2c4">
+        <description>generated readonly permission</description>
+        <resourceName>
+                /relations/object/*
+            </resourceName>
+        <action>
+            <name>READ</name>
+        </action>
+        <action>
+            <name>SEARCH</name>
+        </action>
+        <effect>PERMIT</effect>
+        <tenant_id>1</tenant_id>
+        <createdAt>2010-06-14T11:14:34.895</createdAt>
+    </permission>
+    <permission csid="13093d51-e8ce-4682-aa36-7229b3c21b80">
+        <description>generated readonly permission</description>
+        <resourceName>
+                /relations/object/*/type/*
+            </resourceName>
+        <action>
+            <name>READ</name>
+        </action>
+        <action>
+            <name>SEARCH</name>
+        </action>
+        <effect>PERMIT</effect>
+        <tenant_id>1</tenant_id>
+        <createdAt>2010-06-14T11:14:34.895</createdAt>
+    </permission>
+    <permission csid="76fdf35a-d706-4996-be15-250ac77ee770">
+        <description>generated readonly permission</description>
+        <resourceName>
+                /relations/subject/*
+            </resourceName>
+        <action>
+            <name>READ</name>
+        </action>
+        <action>
+            <name>SEARCH</name>
+        </action>
+        <effect>PERMIT</effect>
+        <tenant_id>1</tenant_id>
+        <createdAt>2010-06-14T11:14:34.895</createdAt>
+    </permission>
+    <permission csid="f0f7a397-94b7-4b7d-a6ea-7a4081853251">
+        <description>generated readonly permission</description>
+        <resourceName>
+                /relations/subject/*/type/*
+            </resourceName>
+        <action>
+            <name>READ</name>
+        </action>
+        <action>
+            <name>SEARCH</name>
+        </action>
+        <effect>PERMIT</effect>
+        <tenant_id>1</tenant_id>
+        <createdAt>2010-06-14T11:14:34.895</createdAt>
+    </permission>
+    <permission csid="32e05c9d-cf05-44d5-ada2-e7d73dc0e71e">
+        <description>generated readonly permission</description>
+        <resourceName>
+                /relations/subject/*/type/*/object/*
+            </resourceName>
+        <action>
+            <name>READ</name>
+        </action>
+        <action>
+            <name>SEARCH</name>
+        </action>
+        <effect>PERMIT</effect>
+        <tenant_id>1</tenant_id>
+        <createdAt>2010-06-14T11:14:34.895</createdAt>
+    </permission>
+    <permission csid="a37297d0-a754-4864-9959-43e6c37efbc9">
+        <description>generated readonly permission</description>
+        <resourceName>
+                /relations/type/*
+            </resourceName>
+        <action>
+            <name>READ</name>
+        </action>
+        <action>
+            <name>SEARCH</name>
+        </action>
+        <effect>PERMIT</effect>
+        <tenant_id>1</tenant_id>
+        <createdAt>2010-06-14T11:14:34.896</createdAt>
+    </permission>
+    <permission csid="485a4d84-77be-497d-9f07-c4927cc820a5">
+        <description>generated readonly permission</description>
+        <resourceName>
+                /relations/type/*/object/*
+            </resourceName>
+        <action>
+            <name>READ</name>
+        </action>
+        <action>
+            <name>SEARCH</name>
+        </action>
+        <effect>PERMIT</effect>
+        <tenant_id>1</tenant_id>
+        <createdAt>2010-06-14T11:14:34.896</createdAt>
+    </permission>
+    <permission csid="cebc18a7-d99e-4594-91f1-b85f208a689a">
+        <description>generated readonly permission</description>
+        <resourceName>
+                /relations/type/*/subject/*
+            </resourceName>
+        <action>
+            <name>READ</name>
+        </action>
+        <action>
+            <name>SEARCH</name>
+        </action>
+        <effect>PERMIT</effect>
+        <tenant_id>1</tenant_id>
+        <createdAt>2010-06-14T11:14:34.896</createdAt>
     </permission>
-    <permission csid="57c3bb71-9214-4735-a288-f3c61510f9f9">
+    <permission csid="bb0df418-4362-4907-99e0-b62fe5d36f4d">
         <description>generated readonly permission</description>
         <resourceName>
-                relations/subject/*/type/*/object/*
+                /relations/type/*/subject/*/object/*
             </resourceName>
         <action>
             <name>READ</name>
@@ -3264,9 +3888,9 @@
         </action>
         <effect>PERMIT</effect>
         <tenant_id>1</tenant_id>
-        <createdAt>2010-06-09T12:04:57.301</createdAt>
+        <createdAt>2010-06-14T11:14:34.896</createdAt>
     </permission>
-    <permission csid="dba15ac5-babc-489d-8adf-63bd9995f178">
+    <permission csid="52843f9e-a2c8-408a-8027-a7448e95f2ea">
         <description>generated readonly permission</description>
         <resourceName>accounts</resourceName>
         <action>
@@ -3277,9 +3901,9 @@
         </action>
         <effect>PERMIT</effect>
         <tenant_id>1</tenant_id>
-        <createdAt>2010-06-09T12:04:57.301</createdAt>
+        <createdAt>2010-06-14T11:14:34.896</createdAt>
     </permission>
-    <permission csid="eb056ced-e0a9-4e1c-9cdc-bb16db69f951">
+    <permission csid="cdbd23ba-c5c4-4d40-9091-794845a271c4">
         <description>generated readonly permission</description>
         <resourceName>dimensions</resourceName>
         <action>
@@ -3290,9 +3914,9 @@
         </action>
         <effect>PERMIT</effect>
         <tenant_id>1</tenant_id>
-        <createdAt>2010-06-09T12:04:57.301</createdAt>
+        <createdAt>2010-06-14T11:14:34.897</createdAt>
     </permission>
-    <permission csid="5cbd95b4-aaea-4872-9826-d6d8f2f1b2be">
+    <permission csid="9d5ac017-8860-4681-a90a-0383c2f13774">
         <description>generated readonly permission</description>
         <resourceName>contacts</resourceName>
         <action>
@@ -3303,9 +3927,9 @@
         </action>
         <effect>PERMIT</effect>
         <tenant_id>1</tenant_id>
-        <createdAt>2010-06-09T12:04:57.301</createdAt>
+        <createdAt>2010-06-14T11:14:34.897</createdAt>
     </permission>
-    <permission csid="5fb27767-ecd5-47d0-b84f-781da0801244">
+    <permission csid="356e6cad-6da4-4c22-9f81-87fd9c9ec307">
         <description>generated readonly permission</description>
         <resourceName>
                 /personauthorities/*/items/*/contacts
@@ -3318,9 +3942,9 @@
         </action>
         <effect>PERMIT</effect>
         <tenant_id>1</tenant_id>
-        <createdAt>2010-06-09T12:04:57.302</createdAt>
+        <createdAt>2010-06-14T11:14:34.897</createdAt>
     </permission>
-    <permission csid="444c92c4-20e5-407b-bcd7-e2a531392ff5">
+    <permission csid="d5f8afc2-0f2a-46b8-a883-a4254d5ab2fb">
         <description>generated readonly permission</description>
         <resourceName>
                 /orgauthorities/*/items/*/contacts
@@ -3333,9 +3957,9 @@
         </action>
         <effect>PERMIT</effect>
         <tenant_id>1</tenant_id>
-        <createdAt>2010-06-09T12:04:57.302</createdAt>
+        <createdAt>2010-06-14T11:14:34.897</createdAt>
     </permission>
-    <permission csid="e7df87bc-5069-4427-9316-c3365fe42895">
+    <permission csid="14c37f47-7f5d-4a97-af84-68ce2339e88b">
         <description>generated readonly permission</description>
         <resourceName>notes</resourceName>
         <action>
@@ -3346,9 +3970,9 @@
         </action>
         <effect>PERMIT</effect>
         <tenant_id>1</tenant_id>
-        <createdAt>2010-06-09T12:04:57.302</createdAt>
+        <createdAt>2010-06-14T11:14:34.897</createdAt>
     </permission>
-    <permission csid="a40a21ab-628c-451e-8cde-b12fdbcb68db">
+    <permission csid="6bf45114-e6e6-4f7a-8c6f-6b536fcb3be2">
         <description>generated readonly permission</description>
         <resourceName>authorization/roles</resourceName>
         <action>
@@ -3359,9 +3983,9 @@
         </action>
         <effect>PERMIT</effect>
         <tenant_id>1</tenant_id>
-        <createdAt>2010-06-09T12:04:57.302</createdAt>
+        <createdAt>2010-06-14T11:14:34.898</createdAt>
     </permission>
-    <permission csid="2395cbea-d6bc-474f-a80a-a9d41c32691f">
+    <permission csid="6dfc1721-878f-4f4f-afb5-2d068f54bb57">
         <description>generated readonly permission</description>
         <resourceName>authorization/permissions</resourceName>
         <action>
@@ -3372,9 +3996,9 @@
         </action>
         <effect>PERMIT</effect>
         <tenant_id>1</tenant_id>
-        <createdAt>2010-06-09T12:04:57.303</createdAt>
+        <createdAt>2010-06-14T11:14:34.898</createdAt>
     </permission>
-    <permission csid="a72da2cd-549a-45e5-a3c0-5352eef10be0">
+    <permission csid="3ae19351-27e2-467a-8c71-4333e509833d">
         <description>generated readonly permission</description>
         <resourceName>authorization/permissions/permroles</resourceName>
         <action>
@@ -3385,9 +4009,9 @@
         </action>
         <effect>PERMIT</effect>
         <tenant_id>1</tenant_id>
-        <createdAt>2010-06-09T12:04:57.303</createdAt>
+        <createdAt>2010-06-14T11:14:34.898</createdAt>
     </permission>
-    <permission csid="2a8f0469-3341-4228-9338-dfd9d46784a9">
+    <permission csid="2198327c-6e18-42ad-91a6-c965418cf21b">
         <description>generated readonly permission</description>
         <resourceName>
                 /authorization/permissions/*/permroles/
@@ -3400,9 +4024,9 @@
         </action>
         <effect>PERMIT</effect>
         <tenant_id>1</tenant_id>
-        <createdAt>2010-06-09T12:04:57.303</createdAt>
+        <createdAt>2010-06-14T11:14:34.898</createdAt>
     </permission>
-    <permission csid="eb7565ed-c182-4e90-91e3-50739a46dc64">
+    <permission csid="6389a857-acb1-4eba-b4d6-25defe3c8ea9">
         <description>generated readonly permission</description>
         <resourceName>accounts/accountroles</resourceName>
         <action>
@@ -3413,9 +4037,9 @@
         </action>
         <effect>PERMIT</effect>
         <tenant_id>1</tenant_id>
-        <createdAt>2010-06-09T12:04:57.303</createdAt>
+        <createdAt>2010-06-14T11:14:34.898</createdAt>
     </permission>
-    <permission csid="a2e9f79b-b52d-4091-b37d-82985c28b625">
+    <permission csid="f87ae03c-4720-4788-8e50-185b30ee1086">
         <description>generated readonly permission</description>
         <resourceName>
                 /accounts/*/accountroles/
@@ -3428,9 +4052,9 @@
         </action>
         <effect>PERMIT</effect>
         <tenant_id>1</tenant_id>
-        <createdAt>2010-06-09T12:04:57.304</createdAt>
+        <createdAt>2010-06-14T11:14:34.899</createdAt>
     </permission>
-    <permission csid="c5f024eb-f512-42e8-894b-4acd26983b45">
+    <permission csid="46901444-14d5-4f7a-ad3a-9dc2262aef74">
         <description>generated readonly permission</description>
         <resourceName>authorization/roles/permroles</resourceName>
         <action>
@@ -3441,9 +4065,9 @@
         </action>
         <effect>PERMIT</effect>
         <tenant_id>1</tenant_id>
-        <createdAt>2010-06-09T12:04:57.304</createdAt>
+        <createdAt>2010-06-14T11:14:34.899</createdAt>
     </permission>
-    <permission csid="d22a2918-4b1b-44e9-a29b-7524281f93ab">
+    <permission csid="1fe6ccf4-4276-4d3b-bad4-3fe1bb6c7d0f">
         <description>generated readonly permission</description>
         <resourceName>
                 /authorization/roles/*/permroles/
@@ -3456,6 +4080,6 @@
         </action>
         <effect>PERMIT</effect>
         <tenant_id>1</tenant_id>
-        <createdAt>2010-06-09T12:04:57.304</createdAt>
+        <createdAt>2010-06-14T11:14:34.899</createdAt>
     </permission>
 </ns2:permissions_list>

diff --git a/services/authorization-mgt/import/src/main/resources/import-data/import-roles.xml b/services/authorization-mgt/import/src/main/resources/import-data/import-roles.xml
index ed022718efe38d8a1c69798f6cca3129b3fc0796..1e493600a8a30d3fd62aa8d34845bb272856a1e5 100644 (file)
--- a/services/authorization-mgt/import/src/main/resources/import-data/import-roles.xml
+++ b/services/authorization-mgt/import/src/main/resources/import-data/import-roles.xml
@@ -1,27 +1,27 @@
 <?xml version="1.0" encoding="UTF-8" standalone="yes"?>
 <ns2:roles_list xmlns:ns2="http://collectionspace.org/services/authorization">
-    <role csid="b6af2c74-4238-44e1-b7c5-12b9a262a39e">
+    <role csid="45c752ca-75aa-4801-a65e-5b85119e4dde">
         <roleName>ROLE_TENANT_ADMINISTRATOR</roleName>
         <description>generated tenant admin role</description>
         <tenant_id>2</tenant_id>
-        <createdAt>2010-06-09T12:04:57.219</createdAt>
+        <createdAt>2010-06-14T11:14:34.801</createdAt>
     </role>
-    <role csid="9e848daa-2b35-444a-871b-95c9b998ed76">
+    <role csid="b5c798e6-3c1c-4c86-b9e0-40a5717bb084">
         <roleName>ROLE_TENANT_ADMINISTRATOR</roleName>
         <description>generated tenant admin role</description>
         <tenant_id>1</tenant_id>
-        <createdAt>2010-06-09T12:04:57.225</createdAt>
+        <createdAt>2010-06-14T11:14:34.843</createdAt>
     </role>
-    <role csid="f7cf0799-0f99-475b-a429-c7cca1349341">
+    <role csid="58b72cb3-d619-43cb-b58b-853802a09f83">
         <roleName>ROLE_TENANT_READER</roleName>
         <description>generated tenant read only role</description>
         <tenant_id>2</tenant_id>
-        <createdAt>2010-06-09T12:04:57.224</createdAt>
+        <createdAt>2010-06-14T11:14:34.842</createdAt>
     </role>
-    <role csid="bbbf085e-3680-4836-a525-52d6d687c1e6">
+    <role csid="16a94748-d98b-4a6d-b404-795915856dca">
         <roleName>ROLE_TENANT_READER</roleName>
         <description>generated tenant read only role</description>
         <tenant_id>1</tenant_id>
-        <createdAt>2010-06-09T12:04:57.225</createdAt>
+        <createdAt>2010-06-14T11:14:34.843</createdAt>
     </role>
 </ns2:roles_list>

diff --git a/services/authorization-mgt/service/src/main/java/org/collectionspace/services/authorization/PermissionResource.java b/services/authorization-mgt/service/src/main/java/org/collectionspace/services/authorization/PermissionResource.java
index 1cdaedbb554415762f4157cb0fc92581ac1ae15c..08457e975d0fb3ff27c9701f4a2d6b32d0d42990 100644 (file)
--- a/services/authorization-mgt/service/src/main/java/org/collectionspace/services/authorization/PermissionResource.java
+++ b/services/authorization-mgt/service/src/main/java/org/collectionspace/services/authorization/PermissionResource.java
@@ -31,6 +31,7 @@ import javax.ws.rs.DELETE;
 import javax.ws.rs.POST;
 import javax.ws.rs.PUT;
 import javax.ws.rs.PathParam;
+import javax.ws.rs.QueryParam;
 import javax.ws.rs.WebApplicationException;
 import javax.ws.rs.core.Context;
 import javax.ws.rs.core.MultivaluedMap;
@@ -387,8 +388,14 @@ public class PermissionResource
 
     @POST
     @Path("{csid}/permroles")
-    public Response createPermissionRole(@PathParam("csid") String permCsid,
+    public Response createPermissionRole(@QueryParam("_method") String method,
+            @PathParam("csid") String permCsid,
             PermissionRole input) {
+                if (method != null) {
+            if ("delete".equalsIgnoreCase(method)) {
+                return deletePermissionRole(permCsid, input);
+            }
+        }
         if (logger.isDebugEnabled()) {
             logger.debug("createPermissionRole with permCsid=" + permCsid);
         }
@@ -487,11 +494,9 @@ public class PermissionResource
         return result;
     }
 
-    @DELETE
-    @Path("{csid}/permroles/{permrolecsid}")
     public Response deletePermissionRole(
             @PathParam("csid") String permCsid,
-            @PathParam("permrolecsid") String permrolecsid) {
+            PermissionRole input) {
         if (logger.isDebugEnabled()) {
             logger.debug("deletePermissionRole with permCsid=" + permCsid);
         }
@@ -507,7 +512,7 @@ public class PermissionResource
             PermissionRoleSubResource subResource =
                     new PermissionRoleSubResource(PermissionRoleSubResource.PERMISSION_PERMROLE_SERVICE);
             //delete all relationships for a permission
-            subResource.deletePermissionRole(permCsid, SubjectType.ROLE);
+            subResource.deletePermissionRole(permCsid, SubjectType.ROLE, input);
             return Response.status(HttpResponseCodes.SC_OK).build();
         } catch (UnauthorizedException ue) {
             Response response = Response.status(

diff --git a/services/authorization-mgt/service/src/main/java/org/collectionspace/services/authorization/PermissionRoleSubResource.java b/services/authorization-mgt/service/src/main/java/org/collectionspace/services/authorization/PermissionRoleSubResource.java
index b56f81a979e9861a2ebeb78265b361e09969d962..a6195c8f0bbf3d75cf47aa888ee1fed84a3b323f 100644 (file)
--- a/services/authorization-mgt/service/src/main/java/org/collectionspace/services/authorization/PermissionRoleSubResource.java
+++ b/services/authorization-mgt/service/src/main/java/org/collectionspace/services/authorization/PermissionRoleSubResource.java
@@ -190,4 +190,24 @@ public class PermissionRoleSubResource
         ServiceContext<PermissionRole, PermissionRole> ctx = createServiceContext((PermissionRole) null, subject);
         getStorageClient(ctx).delete(ctx, csid);
     }
+
+    /**
+     * deletePermissionRole deletes permission-role relationships using given
+     * csid of object (permission/role) and subject (role/permission)
+     * @param csid
+     * @param subject
+     * @param input with role and permissions to delete
+     * @return
+     * @throws Exception
+     */
+    public void deletePermissionRole(String csid,
+            SubjectType subject, PermissionRole input) throws Exception {
+
+        if (logger.isDebugEnabled()) {
+            logger.debug("deletePermissionRole(input) with csid=" + csid);
+        }
+        ServiceContext<PermissionRole, PermissionRole> ctx = createServiceContext(input, subject);
+        DocumentHandler handler = createDocumentHandler(ctx);
+        getStorageClient(ctx).delete(ctx, csid, handler);
+    }
 }

diff --git a/services/authorization-mgt/service/src/main/java/org/collectionspace/services/authorization/RoleResource.java b/services/authorization-mgt/service/src/main/java/org/collectionspace/services/authorization/RoleResource.java
index 49f27fe4977ba269a9d9a4c0d6aa8b25950a7233..03e0767d8b89e2a1d3255201dac09f44dcd3ef9f 100644 (file)
--- a/services/authorization-mgt/service/src/main/java/org/collectionspace/services/authorization/RoleResource.java
+++ b/services/authorization-mgt/service/src/main/java/org/collectionspace/services/authorization/RoleResource.java
@@ -31,6 +31,7 @@ import javax.ws.rs.DELETE;
 import javax.ws.rs.POST;
 import javax.ws.rs.PUT;
 import javax.ws.rs.PathParam;
+import javax.ws.rs.QueryParam;
 import javax.ws.rs.WebApplicationException;
 import javax.ws.rs.core.Context;
 import javax.ws.rs.core.MultivaluedMap;
@@ -377,8 +378,13 @@ public class RoleResource
 
     @POST
     @Path("{csid}/permroles")
-    public Response createRolePermission(@PathParam("csid") String roleCsid,
+    public Response createRolePermission(@QueryParam("_method") String method, @PathParam("csid") String roleCsid,
             PermissionRole input) {
+        if (method != null) {
+            if ("delete".equalsIgnoreCase(method)) {
+                return deleteRolePermission(roleCsid, input);
+            }
+        }
         if (logger.isDebugEnabled()) {
             logger.debug("createRolePermission with roleCsid=" + roleCsid);
         }
@@ -477,14 +483,14 @@ public class RoleResource
         return result;
     }
 
-    @DELETE
-    @Path("{csid}/permroles/{permrolecsid}")
     public Response deleteRolePermission(
             @PathParam("csid") String roleCsid,
-            @PathParam("permrolecsid") String permrolecsid) {
+            PermissionRole input) {
+
         if (logger.isDebugEnabled()) {
             logger.debug("deleteRolePermission with roleCsid=" + roleCsid);
         }
+
         if (roleCsid == null || "".equals(roleCsid)) {
             logger.error("deleteRolePermission: missing roleCsid!");
             Response response = Response.status(Response.Status.BAD_REQUEST).entity(
@@ -497,7 +503,7 @@ public class RoleResource
             PermissionRoleSubResource subResource =
                     new PermissionRoleSubResource(PermissionRoleSubResource.ROLE_PERMROLE_SERVICE);
             //delete all relationships for a permission
-            subResource.deletePermissionRole(roleCsid, SubjectType.PERMISSION);
+            subResource.deletePermissionRole(roleCsid, SubjectType.PERMISSION, input);
             return Response.status(HttpResponseCodes.SC_OK).build();
         } catch (UnauthorizedException ue) {
             Response response = Response.status(

diff --git a/services/authorization-mgt/service/src/main/java/org/collectionspace/services/authorization/storage/AuthorizationDelegate.java b/services/authorization-mgt/service/src/main/java/org/collectionspace/services/authorization/storage/AuthorizationDelegate.java
index 0b02e44dbedac9a67d5925f7386540d95c85a440..3d7d1ad3abbc47ad602f9e5d9a9b6784520ef270 100644 (file)
--- a/services/authorization-mgt/service/src/main/java/org/collectionspace/services/authorization/storage/AuthorizationDelegate.java
+++ b/services/authorization-mgt/service/src/main/java/org/collectionspace/services/authorization/storage/AuthorizationDelegate.java
@@ -113,19 +113,44 @@ public class AuthorizationDelegate {
      */
     static void deletePermissions(ServiceContext ctx, PermissionRole pr)
             throws Exception {
-        PermissionValue pv = pr.getPermissions().get(0);
-        deletePermissions(pv);
-    }
-
-    /**
-     * deletePermissions delete permissions associated with given PermissionValue
-     * @param pv permission value
-     * @throws Exception
-     * @see PermissionValue
-     */
-    static void deletePermissions(PermissionValue pv)
-            throws Exception {
-        deletePermissions(pv.getPermissionId());
+        SubjectType subject = PermissionRoleUtil.getRelationSubject(ctx, pr);
+        AuthZ authz = AuthZ.get();
+        if (subject.equals(SubjectType.ROLE)) {
+            PermissionValue pv = pr.getPermissions().get(0);
+            Permission p = getPermission(pv.getPermissionId());
+            if (p == null) {
+                String msg = "deletePermissions: No permission found for id=" + pv.getPermissionId();
+                logger.error(msg);
+                throw new DocumentNotFoundException(msg);
+            }
+            CSpaceResource[] resources = getResources(p);
+            String[] roles = getRoles(pr.getRoles());
+            for (CSpaceResource res : resources) {
+                authz.deletePermissions(res, roles);
+            }
+        } else if (SubjectType.PERMISSION.equals(subject)) {
+            RoleValue rv = pr.getRoles().get(0);
+            Role r = getRole(rv.getRoleId());
+            if (r == null) {
+                String msg = "deletePermissions: No role found for id=" + rv.getRoleId();
+                logger.error(msg);
+                throw new DocumentNotFoundException(msg);
+            }
+            String[] roles = {rv.getRoleName()};
+            for (PermissionValue pv : pr.getPermissions()) {
+                Permission p = getPermission(pv.getPermissionId());
+                if (p == null) {
+                    String msg = "deletePermissions: No permission found for id=" + pv.getPermissionId();
+                    logger.error(msg);
+                    //TODO: would be nice contiue to still send 400 back
+                    continue;
+                }
+                CSpaceResource[] resources = getResources(p);
+                for (CSpaceResource res : resources) {
+                    authz.deletePermissions(res, roles);
+                }
+            }
+        }
     }
 
     /**

diff --git a/services/authorization-mgt/service/src/main/java/org/collectionspace/services/authorization/storage/PermissionRoleDocumentHandler.java b/services/authorization-mgt/service/src/main/java/org/collectionspace/services/authorization/storage/PermissionRoleDocumentHandler.java
index c863d54493949b6769574fe0614592006d4bcf2d..9c8b1c86db7518932e2753c3065064e71d345c88 100644 (file)
--- a/services/authorization-mgt/service/src/main/java/org/collectionspace/services/authorization/storage/PermissionRoleDocumentHandler.java
+++ b/services/authorization-mgt/service/src/main/java/org/collectionspace/services/authorization/storage/PermissionRoleDocumentHandler.java
@@ -82,9 +82,15 @@ public class PermissionRoleDocumentHandler
         throw new UnsupportedOperationException("operation not relevant for PermissionRoleDocumentHandler");
     }
 
+    @Override
+    public void handleDelete(DocumentWrapper<List<PermissionRoleRel>> wrapDoc) throws Exception {
+        fillCommonPart(getCommonPart(), wrapDoc);
+    }
+
     @Override
     public void completeDelete(DocumentWrapper<List<PermissionRoleRel>> wrapDoc) throws Exception {
-//
+        PermissionRole pr = getCommonPart();
+        AuthorizationDelegate.deletePermissions(getServiceContext(), pr);
     }
 
     @Override

diff --git a/services/common/src/main/java/org/collectionspace/services/common/security/SecurityInterceptor.java b/services/common/src/main/java/org/collectionspace/services/common/security/SecurityInterceptor.java
index fcfa499def7389a2af4412717f41e19cfb6f420e..cd54396ac76de3006d7167b5e2da1360f99ed7df 100644 (file)
--- a/services/common/src/main/java/org/collectionspace/services/common/security/SecurityInterceptor.java
+++ b/services/common/src/main/java/org/collectionspace/services/common/security/SecurityInterceptor.java
@@ -73,10 +73,6 @@ public class SecurityInterceptor implements PreProcessInterceptor {
         checkActive();
         AuthZ authZ = AuthZ.get();
         CSpaceResource res = new URIResourceImpl(resName, httpMethod);
-        /*
-        TEMPORARILY commented out by Aron per Sanjay's suggestion in CSPACE-1946.
-        NOTE: This effectively DISABLES authorization checks at the services layer.
-         */
         if (!authZ.isAccessAllowed(res)) {
             logger.error("Access to " + res.getId() + " is NOT allowed to "
                     + " user=" + AuthN.get().getUserId());

diff --git a/services/common/src/main/java/org/collectionspace/services/common/storage/jpa/JpaRelationshipStorageClient.java b/services/common/src/main/java/org/collectionspace/services/common/storage/jpa/JpaRelationshipStorageClient.java
index 8787ab6b147f6352040b1d730a5792026b588870..ed5a8b68b4d278c24280e449541795e646b32c3d 100644 (file)
--- a/services/common/src/main/java/org/collectionspace/services/common/storage/jpa/JpaRelationshipStorageClient.java
+++ b/services/common/src/main/java/org/collectionspace/services/common/storage/jpa/JpaRelationshipStorageClient.java
@@ -295,6 +295,67 @@ public class JpaRelationshipStorageClient<T> extends JpaStorageClientImpl {
         }
     }
 
+    /**
+     * delete of a relationship deletes one or more relationships between
+     * permission and role
+     * the object and subjects of the relationship is chosen (by doc handler) from
+     * the payload
+     * @param ctx
+     * @param handler
+     * @return
+     * @throws DocumentNotFoundException
+     * @throws DocumentException
+     */
+    @Override
+    public void delete(ServiceContext ctx, String id, DocumentHandler handler)
+            throws DocumentNotFoundException, DocumentException {
+
+        if (ctx == null) {
+            throw new IllegalArgumentException(
+                    "delete : ctx is missing");
+        }
+        if (handler == null) {
+            throw new IllegalArgumentException(
+                    "delete : handler is missing");
+        }
+        EntityManagerFactory emf = null;
+        EntityManager em = null;
+        try {
+            handler.prepare(Action.DELETE);
+            List<T> rl = new ArrayList<T>();
+            DocumentWrapper<List<T>> wrapDoc =
+                    new DocumentWrapperImpl<List<T>>(rl);
+            handler.handle(Action.DELETE, wrapDoc);
+            emf = JpaStorageUtils.getEntityManagerFactory();
+            em = emf.createEntityManager();
+            em.getTransaction().begin();
+            //the following could be much more efficient if done with a single
+            //sql/jql
+            for (T r : rl) {
+                em.remove(r);
+            }
+            em.getTransaction().commit();
+            handler.complete(Action.DELETE, wrapDoc);
+        } catch (DocumentException de) {
+            if (em != null && em.getTransaction().isActive()) {
+                em.getTransaction().rollback();
+            }
+            throw de;
+        } catch (Exception e) {
+            if (logger.isDebugEnabled()) {
+                logger.debug("delete(ctx, ix, handler): Caught exception ", e);
+            }
+            if (em != null && em.getTransaction().isActive()) {
+                em.getTransaction().rollback();
+            }
+            throw new DocumentException(e);
+        } finally {
+            if (emf != null) {
+                JpaStorageUtils.releaseEntityManagerFactory(emf);
+            }
+        }
+    }
+
     /**
      * getObjectId returns the id of the object in a relationship
      * @param ctx

diff --git a/services/security/client/src/test/java/org/collectionspace/services/security/client/test/AuthorizationServiceTest.java b/services/security/client/src/test/java/org/collectionspace/services/security/client/test/AuthorizationServiceTest.java
index da602745c2ddb79a0cb340394470ccb783721214..7530cc8a9f47a3d09792cf3849ca018ca0b80291 100644 (file)
--- a/services/security/client/src/test/java/org/collectionspace/services/security/client/test/AuthorizationServiceTest.java
+++ b/services/security/client/src/test/java/org/collectionspace/services/security/client/test/AuthorizationServiceTest.java
@@ -90,7 +90,6 @@ public class AuthorizationServiceTest extends AbstractServiceTestImpl {
 
     private final String CLASS_NAME = AuthorizationServiceTest.class.getName();
     private final Logger logger = LoggerFactory.getLogger(CLASS_NAME);
-    
     // Instance variables specific to this test.
     private String knownResourceId = null;
     private List<String> allResourceIdsCreated = new ArrayList();
@@ -371,7 +370,7 @@ public class AuthorizationServiceTest extends AbstractServiceTestImpl {
     @Test(dataProvider = "testName", dataProviderClass = AbstractServiceTestImpl.class,
     dependsOnMethods = {"read", "readList", "readNonExistent"})
     public void updateNotAllowed(String testName) throws Exception {
-        
+
         if (logger.isDebugEnabled()) {
             logger.debug(testBanner(testName, CLASS_NAME));
         }
@@ -431,7 +430,7 @@ public class AuthorizationServiceTest extends AbstractServiceTestImpl {
     @Test(dataProvider = "testName", dataProviderClass = AbstractServiceTestImpl.class,
     dependsOnMethods = {"updateNotAllowed"})
     public void deleteNotAllowed(String testName) throws Exception {
-        
+
         if (logger.isDebugEnabled()) {
             logger.debug(testBanner(testName, CLASS_NAME));
         }
@@ -460,7 +459,7 @@ public class AuthorizationServiceTest extends AbstractServiceTestImpl {
     @Test(dataProvider = "testName", dataProviderClass = AbstractServiceTestImpl.class,
     dependsOnMethods = {"deleteNotAllowed"})
     public void delete(String testName) throws Exception {
-        
+
         if (logger.isDebugEnabled()) {
             logger.debug(testBanner(testName, CLASS_NAME));
         }
@@ -520,9 +519,7 @@ public class AuthorizationServiceTest extends AbstractServiceTestImpl {
             logger.debug("Cleaning up temporary resources created for testing ...");
         }
 
-        //FIXME delete on permission role deletes all roles associated with the permission
-        //this would delete association with ROLE_ADMINISTRATION too
-        //deletePermissionRoles();
+        deletePermissionRoles();
         deleteAccountRoles();
         //FIXME delete on permission role deletes all roles associated with the permission
         //this would delete association with ROLE_ADMINISTRATION too
@@ -684,7 +681,7 @@ public class AuthorizationServiceTest extends AbstractServiceTestImpl {
     private String createPermissionRole(PermissionValue pv,
             Collection<RoleValue> rvs) {
         setupCreate();
-                List<RoleValue> rvls = new ArrayList<RoleValue>();
+        List<RoleValue> rvls = new ArrayList<RoleValue>();
         rvls.addAll(rvs);
         PermissionRole permRole = PermissionRoleFactory.createPermissionRoleInstance(
                 pv, rvls, true, true);
@@ -702,14 +699,19 @@ public class AuthorizationServiceTest extends AbstractServiceTestImpl {
         return extractId(res);
     }
 
-    private void deletePermissionRole(String permId) {
+    private void deletePermissionRole(PermissionValue pv,
+            Collection<RoleValue> rvs) {
+        List<RoleValue> rvls = new ArrayList<RoleValue>();
+        rvls.addAll(rvs);
 
         // Perform setup.
         setupDelete();
 
         // Submit the request to the service and store the response.
         PermissionRoleClient client = new PermissionRoleClient();
-        ClientResponse<Response> res = client.delete(permId, "123");
+        PermissionRole permRole = PermissionRoleFactory.createPermissionRoleInstance(
+                pv, rvls, true, true);
+        ClientResponse<Response> res = client.delete(pv.getPermissionId(), permRole);
         int statusCode = res.getStatus();
 
         // Check the status code of the response: does it match
@@ -725,10 +727,14 @@ public class AuthorizationServiceTest extends AbstractServiceTestImpl {
 
     private void deletePermissionRoles() {
 
-        //first delete relationships between the entities
-        for (PermissionValue pv : permValues.values()) {
-            deletePermissionRole(pv.getPermissionId());
-        }
+        List<RoleValue> bigbirdRoleValues = new ArrayList<RoleValue>();
+        bigbirdRoleValues.add(roleValues.get("ROLE_TEST_CM"));
+        deletePermissionRole(permValues.get(bigbirdPermId), bigbirdRoleValues);
+
+        List<RoleValue> elmoRoleValues = new ArrayList<RoleValue>();
+        elmoRoleValues.add(roleValues.get("ROLE_TEST_INTERN"));
+        deletePermissionRole(permValues.get(elmoPermId), elmoRoleValues);
+
     }
 
     private void deleteAccountRoles() {
@@ -757,7 +763,6 @@ public class AuthorizationServiceTest extends AbstractServiceTestImpl {
         }
     }
 
-
     private String getTenantId(AccountClient client) {
         return client.getProperty(AccountClient.TENANT_PROPERTY);
     }

diff --git a/services/security/client/src/test/java/org/collectionspace/services/security/client/test/MultiTenancyTest.java b/services/security/client/src/test/java/org/collectionspace/services/security/client/test/MultiTenancyTest.java
index 75075ecbfcc16bdd4c382a06cdebe860c21be7db..966bed548b57bd8e87e973b45232efe46b41c9ec 100644 (file)
--- a/services/security/client/src/test/java/org/collectionspace/services/security/client/test/MultiTenancyTest.java
+++ b/services/security/client/src/test/java/org/collectionspace/services/security/client/test/MultiTenancyTest.java
@@ -520,8 +520,6 @@ public class MultiTenancyTest extends AbstractServiceTestImpl {
     // CRUD tests : DELETE tests
     // ---------------------------------------------------------------
     // Success outcomes
- 
-
     @Override
     @Test(dataProvider = "testName", dataProviderClass = AbstractServiceTestImpl.class,
     dependsOnMethods = {"deleteNonExistent"})
@@ -632,9 +630,7 @@ public class MultiTenancyTest extends AbstractServiceTestImpl {
         //tenant admin users are used to create accounts, roles and permissions and relationships
         //assumption : two tenant admin users exist before running this test
 
-        //FIXME delete on permission role deletes all roles associated with the permission
-        //this would delete association with ROLE_ADMINISTRATION too
-        //deletePermissionRoles();
+        deletePermissionRoles();
         deleteAccountRoles();
         //FIXME delete on permission role deletes all roles associated with the permission
         //this would delete association with ROLE_ADMINISTRATION too
@@ -646,9 +642,12 @@ public class MultiTenancyTest extends AbstractServiceTestImpl {
     private void deletePermissionRoles() {
 
         //first delete relationships between the entities
+
         for (String tenantId : tenantPermissions.keySet()) {
+            List<RoleValue> tenantRoleValues = new ArrayList<RoleValue>();
+            tenantRoleValues.add(tenantRoles.get(tenantId));
             PermissionValue pv = tenantPermissions.get(tenantId);
-            deletePermissionRole(tenantId, pv.getPermissionId());
+            deletePermissionRole(tenantId, pv, tenantRoleValues);
         }
     }
 
@@ -866,7 +865,7 @@ public class MultiTenancyTest extends AbstractServiceTestImpl {
         return extractId(res);
     }
 
-    private void deletePermissionRole(String tenantId, String permId) {
+    private void deletePermissionRole(String tenantId, PermissionValue pv, List<RoleValue> rvls) {
 
         // Perform setup.
         setupDelete();
@@ -875,7 +874,9 @@ public class MultiTenancyTest extends AbstractServiceTestImpl {
         PermissionRoleClient client = new PermissionRoleClient();
         UserInfo ui = tenantAdminUsers.get(tenantId);
         client.setAuth(true, ui.userName, true, ui.password, true);
-        ClientResponse<Response> res = client.delete(permId, "123");
+        PermissionRole permRole = PermissionRoleFactory.createPermissionRoleInstance(
+                pv, rvls, true, true);
+        ClientResponse<Response> res = client.delete(pv.getPermissionId(), permRole);
         int statusCode = res.getStatus();
 
         // Check the status code of the response: does it match