add capabilities table
acl returns TRUE