added extra privileges to acl