finish acl check on delete (recursive), testandset