finish the auth and acl

Change-Id: I351c46142b1e0100dccb679b13c251a931fe92e5