Actually insert the class field into the Access Control entry.
Added equality assertions for classAces into testUpdateAcl, because of their differences to objectAces