minor correction on ACL implementation for service module