Small correction to ldap ACL