fix acl check