Merge pull request #1305 from sjinks/1.2.4

[1.2.4] [FIX] ACL allows access to forbidden resources