Fix some bugs related to new ACL

- Members should have an access to members content by default
- Fixed bug in User::access function