-- Extra employees roster permissions: phone / salary visibility.

INSERT IGNORE INTO permission_actions (action_key, label, sort_order) VALUES
  ('view_phone', 'View phone numbers', 210),
  ('view_salary', 'View basic salary on roster', 211);

INSERT IGNORE INTO role_permissions (role_id, module_key, action_key, allowed)
SELECT wr.id, 'employees', pa.action_key, 1
FROM workspace_roles wr
CROSS JOIN (
  SELECT 'view_phone' AS action_key UNION ALL SELECT 'view_salary'
) pa
WHERE wr.slug = 'super-admin';