Changed how data resource acl worked. Moved it from Controller Plugin
ACL to a form/validation called in each action.