Fixed ACL security bugs