fixed query for acls :/