@@ -0,0 +25,4 @@
+    resources           jsonb not null,
+
+    constraint chk_hs_booking_item_has_project_or_parent_asset
+        check (type in ('CLOUD_SERVER', 'MANAGED_SERVER') or projectUuid is not null or parentItemUuid is not null)

@@ -33,2 +33,3 @@
 
-    constraint chk_hs_hosting_asset_has_booking_item_or_parent_asset check (bookingItemUuid is not null or parentAssetUuid is not null)
+    constraint chk_hs_hosting_asset_has_booking_item_or_parent_asset
+        check (type in ('CLOUD_SERVER', 'MANAGED_SERVER') or bookingItemUuid is not null or parentAssetUuid is not null)

@@ -222,3 +225,1 @@
-                            }
-                            """.formatted(givenParentAsset.getUuid()))
-                    .port(port)
+                        //.header("current-user", "superuser-alex@hostsharing.net", "hs_hosting_asset#"+givenParentAsset.getIdentifier()+":ADMIN")

@@ -41,6 +41,11 @@ public class RawRbacRoleEntity {
     @NotNull
     public static List<String> distinctRoleNamesOf(@NotNull final List<RawRbacRoleEntity> roles) {
         // TODO: remove .distinct() once partner.person + partner.contract are removed
+        roles.forEach(r -> {