Add is_public column to tp_feed_entry. Create role map table for tp_feed_entry. Add PK for tp_feed_entry_rm. Add FK from tp_feed_entry_rm to rm_entry.id. Add FK from tp_feed_entry_rm to tp_feed_entry.id. Create an index for the FK column tp_feed_entry_rm.rm_entry_id Add a system role (in rm_role) for Tempo news entry viewers. Create a role map entry for every existing Tempo news entry. insert into rm_entry (role_id, tp_fe_id) (select 3, id from tp_feed_entry) Create a role map entry for every existing Tempo news entry. insert into rm_entry (id, role_id, tp_fe_id) (select rm_entry_sq.nextval, 3, id from tp_feed_entry) Associate each existing Tempo news entry with a role map. insert into tp_feed_entry_rm (tp_feed_entry_id, rm_entry_id) select tp_fe_id, id from rm_entry where role_id = 3 Populate the grp table for existing Tempo news entry security groups. insert into grp (uuid) (select distinct fe.group_uuid from tp_feed_entry fe where fe.group_uuid is not null and not exists (select g.uuid from grp g where g.uuid = fe.group_uuid)) Populate the grp table for existing Tempo news entry security groups. insert into grp (id, uuid) select grp_sq.nextval, tmp.group_uuid from ( select distinct fe.group_uuid from tp_feed_entry fe where fe.group_uuid is not null and not exists (select g.uuid from grp g where g.uuid = fe.group_uuid)) tmp Populate the usr table for existing Tempo news entry authors. insert into usr (username) (select distinct fe.author from tp_feed_entry fe where not exists (select u.username from usr u where u.username = fe.author)) Populate the usr table for existing Tempo news entry authors. insert into usr (id, username) select usr_sq.nextval, tmp.author from ( select distinct fe.author from tp_feed_entry fe where not exists (select u.username from usr u where u.username = fe.author)) tmp Set the security group of each existing Tempo news entry into its role map. insert into rm_entry_groups (rm_entry_id, group_id) select rme.id, g.id from rm_entry rme join tp_feed_entry fe on fe.id = rme.tp_fe_id join grp g on g.uuid = fe.group_uuid where rme.tp_fe_id is not null and fe.group_uuid is not null Set the author user of each existing Tempo news entry into its role map. insert into rm_entry_users (rm_entry_id, usr_id) select rme.id, u.id from rm_entry rme join tp_feed_entry fe on fe.id = rme.tp_fe_id join usr u on u.username = fe.author where rme.tp_fe_id is not null and fe.type != 6 For previously unsecured Tempo news entries, set the is_public column. group_uuid is null Remove the group_uuid column from tp_feed_entry (now replaced by role map). Create an index for the FK column rm_entry_groups.group_id