finish migrate script to deal with the ACL at the SP side