fix ACL check