activated ACL, added one base rule for admin role
Merge remote-tracking branch 'origin/master'