PackageListingAcl.get_acl_package already check for the user no need to recheck one level above