acl configuration scanner