# Calendar Module Permissions Migration

The calendar module introduces new API resources `calendar_events` and `meetings`. To secure these endpoints, grant the following permissions in the `roles_permissions` table.

## Recommended Permissions

| Role | Permissions |
|------|-------------|
| **Admin** | `calendar_events.*`, `meetings.*` |
| **Super Admin** | already covered by wildcard `*.*` |

Run SQL updates similar to:

```sql
UPDATE roles_permissions
SET permissions = JSON_SET(permissions,
  '$.calendar_events', JSON_ARRAY('*'),
  '$.meetings', JSON_ARRAY('*'))
WHERE role = 'Admin';

-- Only needed if your SuperAdmin role does not already use `*.*`
UPDATE roles_permissions
SET permissions = JSON_SET(permissions,
  '$.calendar_events', JSON_ARRAY('*'),
  '$.meetings', JSON_ARRAY('*'))
WHERE role = 'SuperAdmin';
```

Adjust the statements if the JSON already contains these keys.