Fix ACL checkers for new user/repo/group structure