AclAuthorizator: support for compound names