--liquibase formatted sql
-- PANELS · iam · permiso eliminar documentos de expediente

--changeset panel:iam-006a-documents-delete endDelimiter:; splitStatements:true
INSERT INTO iam.permissions (code, label, module, verb, perm_group) VALUES
  ('documents.delete', 'Eliminar documentos de expediente', 'documents', 'delete', NULL)
ON CONFLICT (code) DO UPDATE SET
  label = EXCLUDED.label,
  module = EXCLUDED.module,
  verb = EXCLUDED.verb,
  perm_group = EXCLUDED.perm_group;

INSERT INTO iam._legacy_perm_map (legacy_code, v2_code) VALUES
  ('manage_documents', 'documents.delete')
ON CONFLICT (legacy_code, v2_code) DO NOTHING;

INSERT INTO iam.role_permissions (role_id, permission_code)
SELECT sr.id, 'documents.delete'
  FROM iam.roles sr
 WHERE sr.code = 'tenant_admin'
   AND sr.is_system
   AND sr.tenant_id IS NULL
ON CONFLICT DO NOTHING;