Apply ACLs to evaluation update() and delete()