DefaultAcl implementation