enlarge privileges
added ACL checking