use httpRequest to check on acl requests