ManagerBundle: Source ACL security